Re: Setting permissions in User Security tab is reverting back to previoussetting



ok, but do you unuderstand the impact?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"George Nussbaum" <nuzzy@xxxxxxxxx> wrote in message news:%23dAtV5$bIHA.2000@xxxxxxxxxxxxxxxxxxxxxxx
It was a recommendation per the Microsoft KB

Jorge de Almeida Pinto [MVP - DS] wrote:
are you aware of what you have done?

the adminsdholder objects protects groups and members of protected groups. by allowing such thing you enabled, you just may have given other admin to make changes to those powerfull accounts

.



Relevant Pages

  • Re: migration AD 2000 to 2003
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Jorge de Almeida Pinto wrote: ...
    (microsoft.public.win2000.active_directory)
  • Re: migration AD 2000 to 2003
    ... Jorge de Almeida Pinto wrote: ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ...
    (microsoft.public.win2000.active_directory)
  • Re: Changing the Display Name Created using ADUC (2003)
    ... so let's say you WANT to make sure the samaccountname only consist of ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... Jorge de Almeida Pinto wrote: ...
    (microsoft.public.windows.server.active_directory)
  • Re: DC issues
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ...
    (microsoft.public.win2000.active_directory)
  • Re: migration AD 2000 to 2003
    ... Jorge de Almeida Pinto wrote: ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... which one and i didn't see any after the preparation). ...
    (microsoft.public.win2000.active_directory)

Loading