Click here to get back home

Administrators , power user
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Administrators , power user beachboy 08-10-2006
Posted by beachboy on August 10, 2006, 6:14 am
Please log in for more thread options
 I want to create a user and grant a administors group permission, is
possible to restrict that user can't change password for all user, include
herself~

Thanks.



Posted by Joe Richards [MVP] on August 10, 2006, 9:46 am
Please log in for more thread options
 No, there aren't sublevels of administrators. If you amke someone an
administrator, they have root level access to do anything they want.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


beachboy wrote:
> I want to create a user and grant a administors group permission, is
> possible to restrict that user can't change password for all user, include
> herself~
>
> Thanks.
>
>

Posted by Lincoln De Kalb on August 10, 2006, 6:27 pm
Please log in for more thread options
Take a look at what you want them to do and grant those permissions via
delegate of control wizard.

I havent' tried it but if you granted administrator rights to a user / group
then use delegate of control wizard to explicitly deny change password
rights, that might work though haven't tried it.

>I want to create a user and grant a administors group permission, is
> possible to restrict that user can't change password for all user, include
> herself~
>
> Thanks.
>
>



Similar ThreadsPosted
add user to local administrators group May 24, 2006, 4:00 am
Nosey, power hungry boss... October 21, 2006, 12:26 am
Group Policy - Power Management September 2, 2008, 6:13 pm
Power Users & Servers - Windows 2000 & 2003 Differences December 7, 2006, 9:32 am
Allow power users to "Show Processes From All Users" in Task Manager May 25, 2007, 6:38 pm
Local Administrators September 1, 2006, 9:55 am
Administrators do not have Owner Permissions August 16, 2006, 8:44 am
Deny folder access for administrators January 24, 2006, 4:28 am
AD administrators and domain admins groups April 25, 2006, 12:26 pm
How protect Administrators account and passwords June 7, 2007, 9:31 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap