Active Direcotry Security - isolate users from accessing Active directory users and computers

Posted on 2006-04-17
Last Modified: 2013-12-04

we have a domain with many administrators thus many people can access the active directory usres and computers. We want to secure the active directory and have 2-3 admins being able to access the A.D.

How can i do that?

Question by:c_hockland
    LVL 48

    Expert Comment

    Hi c_hockland,

    you need to set the following policy setting in a GPO and apply to everyone except the users you want

    User Config\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Active Directory Users and Computers

    LVL 48

    Accepted Solution


    i would reccomend putting it in a separate policy and using security filtering to disable your admin users applying it, thus giving them access to ADUC

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Join & Write a Comment

    Article by: btan
    The intent is not to repeat what many has know about Ransomware but more to join its dots of what is it, who are the victims, why it exists, when and how we respond on infection. Lastly, sum up in a glance to share such information with more to help…
    As a Mac user and former AppleCare AHA & Senior Advisor, I'm constantly bombarded with questions about Macs and if they need Antivirus. This short article is my response to those questions.
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!

    732 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now