Active Directory, Security Tab vs Member of
I would like to know the difference between the secuity tab on profiles and the Member of tab. I believe the security tab is for access to the profile and the Member of tab is for the user level access. I ask this because there a number of roles in the security tab of a user profile but in the member of tab they user only has Domain Users. How are the two related\not related? I am trying to clean up my active directory and set new security standards but want to make sure I am making the right changes without breaking my active directory and removing roles that don't need to be removed.
Thank You in advance.
Thank You in advance.
Member of give you information as to you are memeber of which all groups
Security tab has permission for these groups.
Hope it helps
Inderjeet
Security tab has permission for these groups.
Hope it helps
Inderjeet
As everyone else has said
When you right click a user in AD and select properties the "Member Of" Tab shows you what groups that user belongs to / is a member of.
(now i'm not sure where your seeing the security tab but)
When you right click a user in AD and select properties and are viewing the security Tab on a users object (having selected the advanced view) what you would be viewing is the security relating to that object within AD, and you probably don't want to be messing with it as doing so will cause issues for that user.
When you right click a user in AD and select properties the "Member Of" Tab shows you what groups that user belongs to / is a member of.
(now i'm not sure where your seeing the security tab but)
When you right click a user in AD and select properties and are viewing the security Tab on a users object (having selected the advanced view) what you would be viewing is the security relating to that object within AD, and you probably don't want to be messing with it as doing so will cause issues for that user.
ASKER
The reason I am questioning the Security tab is because there is the Administrator role, Exchange administrator role, Backup operator role, etc... and I don't want the users to have the admin role which I see they don't have in the Member of tab but want to clean up any unnecessary roles in the Security tab.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
"The reason I am questioning the Security tab is because there is the Administrator role, Exchange administrator role, Backup operator role, etc... and I don't want the users to have the admin role which I see they don't have in the Member of tab but want to clean up any unnecessary roles in the Security tab. "
They are they so those groups (administartive groups) can manage the user, not the other way arround.
If you are the administrator and are part of those groups (as you should be) then they give you permission to modify the users opbject,..make sense?
They are they so those groups (administartive groups) can manage the user, not the other way arround.
If you are the administrator and are part of those groups (as you should be) then they give you permission to modify the users opbject,..make sense?
Here is a link on Security Tab.
http://www.lockergnome.com/windows/2005/11/08/find-the-security-tab-in-active-directory/