Solved

Removing the ability to delete an OU

Posted on 2006-10-31
3
219 Views
Last Modified: 2010-04-13
I have a account called Dameware Admins and it was created by someone else and granted way to many permissions.  I need to remove the right to delete or create an OU in AD, also the ability to delete Groups out of AD.  How can I reconfig this account without having to create a new one?
0
Comment
Question by:Klint_turney
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 25

Accepted Solution

by:
mikeleebrla earned 500 total points
ID: 17845155
i assume this account is in the domain or enterprise admin group?  if so, simply remove it from these groups and then assign it whatever permissions it NEEDS to do whatever the account is used for.

whoever setup the account just gave it blanket domain admin access b/c that was the easiest way to set it up.

0
 
LVL 2

Author Comment

by:Klint_turney
ID: 17845259
If there is audit enabled how do I view the logs?  Aren't they in Event Viewer- Security?

Also you delete something from a OU wouldn't that show only on the DC you're auth to?
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 17845578
hold up, your initial question asked how you remove the ABILITY to delete groups, etc etc, now you are talking about auditing and event logs.....

which do you want? a how to for permissions, or a how to on logging events?  b/c your initial question mentioned nothing about logging/auditing.

but yes, whatever you HAD logging turned on for will show up in the security section of the event viewer.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Windows 2000 undelete (free program?) 6 440
Windows task manager not executing scheduled task correctly? 6 160
windows explorer 21 186
Windows 2000 48-bit LBA 13 78
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question