Re: creating local users, how??

Tech-Archive recommends: Fix windows errors by optimizing your registry

thanks, just one more question:

I've created an domain user, but it's a member of Domain Users... I tryed to
remove that group from the user, but I'm not allowed to do that. "Domain
Users" is the primary group on this machine. I know I could create another
group and set that as primary group. But I don't think that would make it
more secure because all the other accounts need to be a member of that
group... or so I think... what is your views on this?


.

Relevant Pages

  • Re: LDAP returns wrong members
    ... - An object can be a member of a group by virtue of that object's DN being a value in the group's "member" attribute. ... Users can have a group be their primary group. ... ADUC may show you both types of memberships as it is doing something more complex than just a simple LDAP query to member. ... Joe Kaplan-MS MVP Directory Services Programming ...
    (microsoft.public.windows.server.active_directory)
  • Re: LDAP returns wrong members
    ... Querying the tokenGroups attribute will show you the full security group membership for a single user, so it is usually the most helpful here. ... There IS the special filter type for doing transitive matching on DN syntax attributes added in 2K3 SP1, but it is most helpful for checking to see if a given use is a member of a specific group including via nesting rather than expanding a whole list. ... You can definitely do LDAP queries for primary group as well, You just can't determine that by looking at member/memberOf since the data is not stored there. ...
    (microsoft.public.windows.server.active_directory)
  • Re: memberOf property usin CSVDE
    ... you'd actually not find the link to the primary group in memberOf - it will ... (the ADUC UI also adds the primary group to the list on the "Member Of" tab ... >>I am curios as to why I can not specify a memberOf filter when using ... the command tool appears to be ...
    (microsoft.public.windows.server.active_directory)
  • Re: Changing the Default Primary Group that new AD Users are added
    ... > We want to change the default Primary group for our external Sharepoint ... >> as the global group Domain Users or the global group Domain Computers. ... Select the Member Of tab. ...
    (microsoft.public.win2000.active_directory)
  • RE: Changing the Default Primary Group that new AD Users are added
    ... We want to change the default Primary group for our external Sharepoint ... > as the global group Domain Users or the global group Domain Computers. ... Select a group with global or universal scope in the Member Of list box. ...
    (microsoft.public.win2000.active_directory)