RE: sbs user permissions
- From: v-chayan@xxxxxxxxxxxxxxxxxxxx ("Charles Yang [MSFT]")
- Date: Mon, 25 Jul 2005 03:01:45 GMT
Hi,
Welcome to our SBS newsgroup.
I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!
Issue description:
I understand that you want to customize one SBS user's permission to give
her some special permission.
Analyzing and suggestions:
By default, we can use delegate control to give user special permission,
after checking your requirement, it might be difficult to delegate such
kinds of permission to a special user. As the permission you required for
that user is a full Domain Admin permission, by default if you applied this
kinds of permission to that user, the user will have the right to change
the password of any users.
We can not set limitation to only allow user to change part of users'
permission in special group. So it might be impossible to achieve your
goal. As this might be a security hole, if such user can be created, the
hacker can use this kinds of user to change the password of other admin'
password then they can use it to steal the password of you and your boss.
However you can refer to the steps below to see the permission we can
delegate to SBS users.
1. Navigate to ADUC on server management, navigate to the OU that the user
exist.
2. Right click the OU, choose delegate control.
3. Follow the wizard to delegate the permission to the special user.
You can refer to the article below to see which kinds of permission, you
can delegate to the users:
Delegate control Wizard on SBS 2003 server:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/
activedirectory/stepbystep/ctrlwiz.mspx
I appreciate your understanding, if you have any further concerns; please
feel free to let me know. I will be here waiting for your updates.
Best regards,
Charles Yang (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
.
- Follow-Ups:
- Re: sbs user permissions
- From: param
- Re: sbs user permissions
- References:
- sbs user permissions
- From: param
- sbs user permissions
- Prev by Date: RE: Security Log settings
- Next by Date: Re: Backups in SBS2003 Standard Edition
- Previous by thread: Re: sbs user permissions
- Next by thread: Re: sbs user permissions
- Index(es):
Relevant Pages
|
