Re: Senior Administrators and Junior Administrators

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Not possible
If a user has the "permissions" to change passwords, they can change any password including their own, or even the Root Administrator account.

This is not a technical issue, this is a personnel issue.
If employee's are hired who will have responsibility for server managment, then they should have written duties and guidelines with clearly defined consequenses should they behave outside established guidelines.

You do this...you're fired! Pretty clear. If you can't trust them...they shouldn't have been hired.



--
Cris Hanna [SBS - MVP]
Co-Contributor, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
Owner, CPU Services, Belleville, IL
A Microsoft Registered Partner
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"Magnetoram" <Magnetoram@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:85E6C202-7288-45E1-94D0-F1C49CEB9A15@xxxxxxxxxxxxxxxx
Is there a way to have 2 levels of Administrator access to the domain. I
would like to have senior admins have Full Permissions and junior admins
with levels that restrict them from locking out the senior admins or changing
primary passwords

Relevant Pages

  • Re: Date filed in table
    ... You can control some deletes, etc. from paradox based on passwords and permissions you set but they can be broken and it can get complicated to manage multiple levels across multiple tables and various users, permissions and systems. ... also like a field showing the last time the table entry was edited. ...
    (comp.databases.paradox)
  • Re: Problem managing accounts in protected groups
    ... As I understand it you have a collection of users in some group which are allowed to reset passwords of domain admin accounts? ... The permissions for this group have been applied to OU B and it ... or passwords for the users in the protected groups. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Clients not able to login to Domain
    ... Passwords are supposed to remained synched between AD and Novell, ... it may be a "permissions" issue. ... >> You say Not able to login, but then your error is not able to map? ...
    (microsoft.public.windows.server.sbs)
  • Re: Closed LAN: want WORKGROUP to share w/o passwords
    ... the passwords and permissions? ... I'm lost in PERMISSIONS and PASSWORD "hell"! ... XP Pro file sharing in a workgroup doesn't use permissions ... Please post any reply as a follow-up message in the news group ...
    (microsoft.public.windowsxp.network_web)
  • Re: Delegation - Password Reset - Access Denied
    ... You attempt to see if the permissions are being applied as you expected. ... Open up a user's properties and select the security tab, click on advanced, ... those groups and reset passwords when needed. ...
    (microsoft.public.windows.server.active_directory)