Solved

AD Users and computers

Posted on 2004-08-13
3
207 Views
Last Modified: 2010-04-19
Is there a way to limit access to AD users and computers even if a user you want to limit is in the Domain admins group?
0
Comment
Question by:ohmadmin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 16

Accepted Solution

by:
JamesDS earned 50 total points
ID: 11792700
ohmadmin
You can use the Delegation of Admin tool and the permissions settings on the OUs to allow/deny access to almost anything.

However, you are better creating an administrative group that has only the access you want to give your admins and move them out of the domain admins group into the new group.

Cheers

JamesDS
0
 

Author Comment

by:ohmadmin
ID: 11813853
Thanks.
0
 
LVL 16

Expert Comment

by:JamesDS
ID: 11817904
ohmadmin
Welcome, glad to help

Cheers

JamesDS
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question