Click here to get back home

Builtin Group Missing

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Builtin Group Missing Pat Hall 10-11-2005
Posted by Pat Hall on October 11, 2005, 3:11 pm
Please log in for more thread options
I would like to use the Server Operator group to give our Operations staff
access to our servers. I don't see this group on any of our servers (Windows
2003 or Windows 2000). I do see the Power Users group which would give them
more access than they need.
Is the Server Operators group still a valid group on a server? If so, why
can't I see it?


Posted by Olaf Engelke [MVP Windows Serv on October 12, 2005, 12:04 pm
Please log in for more thread options
Hi PAt,
Pat Hall wrote:
> I would like to use the Server Operator group to give our Operations
> staff access to our servers. I don't see this group on any of our
> servers (Windows 2003 or Windows 2000). I do see the Power Users
> group which would give them more access than they need.
> Is the Server Operators group still a valid group on a server? If
> so, why can't I see it?

you did take a look in Active Directory Users and Computers in the Builtin
container?
(This group exists only on a Domain level.)
Best greetings from Germany



Posted by Pat Hall on October 12, 2005, 7:15 am
Please log in for more thread options
Since we are an AD domain, do I need to use those instead of the groups on
the servers? Some groups like administrators & Backup Operators are in
Builtin in AD and on the server.
What if I don't want an indibvidual to have Server Operator to a server? By
using the Domain level group, I would think that the access would be for all
servers and probably desktops.

"Olaf Engelke [MVP Windows Server]" wrote:

> Hi PAt,
> Pat Hall wrote:
> > I would like to use the Server Operator group to give our Operations
> > staff access to our servers. I don't see this group on any of our
> > servers (Windows 2003 or Windows 2000). I do see the Power Users
> > group which would give them more access than they need.
> > Is the Server Operators group still a valid group on a server? If
> > so, why can't I see it?
>
> you did take a look in Active Directory Users and Computers in the Builtin
> container?
> (This group exists only on a Domain level.)
> Best greetings from Germany
>
>


Posted by Roger Abell [MVP] on October 12, 2005, 7:26 am
Please log in for more thread options
Server Operators is defined in the domain account database, and it is not
used on domain members (unless someone uses it) but only on the DCs.

> Since we are an AD domain, do I need to use those instead of the groups on
> the servers? Some groups like administrators & Backup Operators are in
> Builtin in AD and on the server.
> What if I don't want an indibvidual to have Server Operator to a server?
> By
> using the Domain level group, I would think that the access would be for
> all
> servers and probably desktops.
>
> "Olaf Engelke [MVP Windows Server]" wrote:
>
>> Hi PAt,
>> Pat Hall wrote:
>> > I would like to use the Server Operator group to give our Operations
>> > staff access to our servers. I don't see this group on any of our
>> > servers (Windows 2003 or Windows 2000). I do see the Power Users
>> > group which would give them more access than they need.
>> > Is the Server Operators group still a valid group on a server? If
>> > so, why can't I see it?
>>
>> you did take a look in Active Directory Users and Computers in the
>> Builtin
>> container?
>> (This group exists only on a Domain level.)
>> Best greetings from Germany
>>
>>




Posted by Pat Hall on October 12, 2005, 7:50 am
Please log in for more thread options
What I need to do is give the Operations staff the ability to: Reboot a
server, stop/start a Service and use the Cluster Administrator and SQL
Service Manager and the file server backup application.
The Server Operators group seems like the best way to give them this access.
I need them to have this access on all the members servers in addition to
the DCs.
Is there a better way to do what I am trying to do?
BTW: I don't see the Local Users & Groups under Manage on the DCs.


"Roger Abell [MVP]" wrote:

> Server Operators is defined in the domain account database, and it is not
> used on domain members (unless someone uses it) but only on the DCs.
>
> > Since we are an AD domain, do I need to use those instead of the groups on
> > the servers? Some groups like administrators & Backup Operators are in
> > Builtin in AD and on the server.
> > What if I don't want an indibvidual to have Server Operator to a server?
> > By
> > using the Domain level group, I would think that the access would be for
> > all
> > servers and probably desktops.
> >
> > "Olaf Engelke [MVP Windows Server]" wrote:
> >
> >> Hi PAt,
> >> Pat Hall wrote:
> >> > I would like to use the Server Operator group to give our Operations
> >> > staff access to our servers. I don't see this group on any of our
> >> > servers (Windows 2003 or Windows 2000). I do see the Power Users
> >> > group which would give them more access than they need.
> >> > Is the Server Operators group still a valid group on a server? If
> >> > so, why can't I see it?
> >>
> >> you did take a look in Active Directory Users and Computers in the
> >> Builtin
> >> container?
> >> (This group exists only on a Domain level.)
> >> Best greetings from Germany
> >>
> >>
>
>
>


Similar ThreadsPosted
INTERACTIVE group missing after SSPI auth October 28, 2005, 12:54 pm
INTERACTIVE group missing after SSPI auth November 2, 2005, 3:16 pm
Problem with Domain Admin becoming Administrator (builtin) April 11, 2006, 10:07 am
Missing Folder July 1, 2005, 9:49 am
Security Tab Missing October 16, 2006, 4:38 pm
Missing PC - Want to know who last logged on June 28, 2007, 6:50 pm
Missing Distributed COM Users June 1, 2005, 7:22 am
New Certificate Template Missing February 1, 2006, 12:09 pm
Security Tab missing (Win 2003 Server) December 1, 2005, 7:40 pm
Cleaning Up Files that are Missing NTFS Permissions March 20, 2006, 11:54 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap