Mapping to W2003 user rights/access?

From: Athy (anonymous_at_discussions.microsoft.com)
Date: 06/03/04 

Date: Thu, 3 Jun 2004 14:39:53 -0700

Hi
We are migrating from NT to W2003 and where in the past it
was required to have a lot of people with domain admin
rights, I am hoping W2003 will be a lot more accomodating
when it comes to access/user rights.
Basically I have a few questions:
1) Can members of the default account operators now manage
privileged accounts?
2) What access is needed to manage DNS, replication,
clustering, etc? Hopefully not domain admin...
3) Can server operators be used if servers are not kept in
the default OU's? If not, how can I work around that?
4) What access can be used for accounts used to do
security patch level scanning?
5) Would Exchange 2003 admins require any special rights
apart from within Exchange itself?
6) Is there a granular delegation setting or something
similar to be able to view GPO settings but not change
them?

Thanks!

Relevant Pages

  • Re: Script not working correctly for users w/out admin rights to t
    ... Could it be that when you have tested this for accounts that have admin ... rights to the server. ... The code should account for the memberOf attribute having ...
    (microsoft.public.windows.server.scripting)
  • Re: vb6 file locking
    ... Both my process are running under different accounts with admin ... try out if it can read when the second process has admin rights. ...
    (microsoft.public.vb.general.discussion)
  • Re: isolating a subdomain in AD
    ... domain/enterprise admin rights permissions to some domain that same admin ... * This posting is provided "AS IS" with no warranties and confers no rights! ... >> EVERY domain admin in the forest can take over control, ... >>> Can a Domain Admin become a Enterprise Admin within a Forest ...
    (microsoft.public.windows.server.active_directory)
  • Re: Limit access to Active Directory Users and Computers
    ... I would suggest you place the domain admin accounts in a seperate ou and not allow ordinary users read access to this ou. ... >> admin pack on their local machine. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Admin with no Rights to Active Directory
    ... domain admin access rights and even Enterprise Admin rights. ... > changes to Active Directory ...
    (microsoft.public.exchange2000.active.directory.integration)
Loading