Re: Can I restrict a user's group membership?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hmmm, I didn't think you'd misunderstood ... perhaps my wording was
poor. Restricted Groups prevent the long-term modification of a group's
members or membership in other groups by resetting it periodically
thereby preventing users from gaining access to resources through
inadvertent or malicious group modification.

--
Dean Wells [MVP / Directory Services]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e t h e m a s k t o s e n d e m a i l


"Sandy Wood" <sandy.wood@xxxxxxxxxx> wrote in message
news:50F03B29-9AC1-419D-B2D0-B27790E08008@xxxxxxxxxxxxxxxx
Hmmm...that sounds just like what I was thinking. I think I've got the
concept of Restricted Groups backwards then. Maybe I need to read up,
again,
on Restricted Groups.
--
Sandy Wood
Orange County District Attorney


"Dean Wells (MVP)" wrote:

Nod, that would about cover it. Restricted Groups is designed more
to
keep user's in a prescriptive set of groups ...

--
Dean Wells [MVP / Directory Services]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e t h e m a s k t o s e n d e m a i l


"Sandy Wood" <sandy.wood@xxxxxxxxxx> wrote in message
news:25CDC9DB-9DA8-42D7-9DB8-D27B40E20D64@xxxxxxxxxxxxxxxx
What I was thinking was to prevent a user from getting membership
in
other
groups, but then the more I thought about it, that's what acls are
for
in
changing group membership.
--
Sandy Wood
Orange County District Attorney


"Dean Wells (MVP)" wrote:

Depends what you mean specifically I guess but there is a feature
called
'Restricted Groups' in GP.

Perhaps you could define your objective more specifically.

--
Dean Wells [MVP / Directory Services]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e t h e m a s k t o s e n d e m a i l


"Sandy Wood" <sandy.wood@xxxxxxxxxx> wrote in message
news:EC099CA0-F9EE-438F-94FB-F71DD04869B1@xxxxxxxxxxxxxxxx
Is there any way (Group Policy) to restrict just what groups a
user
object
can be a member of?
--
Sandy Wood
Orange County District Attorney








.

Relevant Pages

  • Re: Can I restrict a users group membership?
    ... Dean Wells [MVP / Directory Services] ... 'Restricted Groups' in GP. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Can I restrict a users group membership?
    ... explanation was clear and now I think I get the whole Restricted Groups ... members or membership in other groups by resetting it periodically ... Dean Wells [MVP / Directory Services] ...
    (microsoft.public.windows.server.active_directory)
  • Re: Can I restrict a users group membership?
    ... concept of Restricted Groups backwards then. ... Orange County District Attorney ... Dean Wells [MVP / Directory Services] ...
    (microsoft.public.windows.server.active_directory)
  • Re: Finding a developer/tutor, value of MVP qualification.
    ... The application is a membership database. ... Do we really, really need an MVP? ... the consultant could also be in the running for any future ... State what version of SQL Server you are using and specify the content ...
    (microsoft.public.access.adp.sqlserver)
  • Re: Loginscript is lacking credentials.........
    ... Basically, what Paul B said. ... Restricted groups is the way to go. ... idea behind this feature is to enforce strict membership. ... a user or group to a group without trashing the existing membership. ...
    (microsoft.public.windows.server.active_directory)