Re: restrict access to view ad

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Thanks Meinolf for your fast reply!

Users with admin rights on thier local ws do have rights to install what
they like but I would just like a way to restrict users from viewing ADUC.
The GPO can forbid snap-in but the user also has access of viewing user
properties via address book (keep in mind my supervisor does not want to
include GPOs). I came acorss this link which obviously has been a major
concern for alot of system administrators but I think it is quite a lengthy
process to adopt and was hoping there was a much easier way for this to get
done.
http://redmondmag.com/columns/article.asp?EditorialsID=617

Does anyone know where I can get a detailed list of all the property
permissions so that I can start testing what impact to the user will occur
based on changing settings on a particular OU. I know for certain there are
some attributes that are required for proper operation, such as user login
which require those read permissions nestled within ADUC. For heaveans sake
I do not want to modify the schema as well.

Thanks,
Altria

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66d72f8cb11635e6729e1@xxxxxxxxxxxxxxxxxxxxxxx
Hello Altria,

Without using Group policies this will be not possible i think. If they
are able to install the admin tools, you have also an open door. You
should really think about using GPO's for this.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Hello All,
How can I restrict users from viewing AD properties and contents, such
as in
Administrative tools
I am not runnning GP.
Thanks
Altria




.

Relevant Pages

  • Re: Granting all users Admin Rights
    ... Giving users in an environment that big Admin rights is asking for trouble. ... Even worse any closet hacker wanabee would install Lophtcrack and pull up ... > I am a Network Admin for Cuesta College and we are dealing with the same ...
    (microsoft.public.win2000.security)
  • RE: Office tries to repair/reinstall
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Download and install the Windows Installer Cleanup Utility. ... Giving admin rights to everyone is not the solution. ... The file association issue should be also related to the Office 2007 installation. ...
    (microsoft.public.office.setup)
  • Re: Admin rights for using System.EnterpriseServices in .net
    ... If you app does not have enough rights, "lazy" installation will not work. ... In such a case you need to install the components by using regsvc utitily. ... > machine as I have admin rights. ...
    (microsoft.public.dotnet.framework.component_services)
  • Re: Cannot install program even with Administrator rights
    ... Admin, the OS itself should only have those rights as I understand it,) but honestly if there's a problem installing it with Admin rights, you've probably got issues elsewhere that will be back to haunt you unless you find the root cause of the problem. ... specifically how does the Adobe install fail? ... a temporary fix *might* be to try gaining system rights from an account with admin rights - but I'd only recommend doing this if you don't have the time to find the root cause of the problem. ...
    (microsoft.public.windowsxp.general)
  • RE: Office tries to repair/reinstall
    ... Giving admin rights to everyone is not the solution. ... The file association issue should be also related to the Office 2007 installation. ... I will check the registry and install windows installer. ...
    (microsoft.public.office.setup)