• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2340
  • Last Modified:

Active Directory, Security Tab vs Member of

I would like to know the difference between the secuity tab on profiles and the Member of tab. I believe the security tab is for access to the profile and the Member of tab is for the user level access. I ask this because there a number of roles in the security tab of a user profile but in the member of tab they user only has Domain Users. How are the two related\not related? I am trying to clean up my active directory and set new security standards but want to make sure I am making the right changes without breaking my active directory and removing roles that don't need to be removed.

Thank You in advance.
0
Tim
Asked:
Tim
1 Solution
 
Darius GhassemCommented:
Member of describes what groups the user is in within the AD domain. This allows you to view all group memberships at once.

Here is a link on Security Tab.
http://www.lockergnome.com/windows/2005/11/08/find-the-security-tab-in-active-directory/
0
 
InderjeetjaggiCommented:
Member of give you information as to you are memeber of which all groups
Security tab has permission for these groups.

Hope it helps
Inderjeet
0
 
Mike ThomasConsultantCommented:
As everyone else has said

When you right click a user in AD and select properties the "Member Of" Tab shows you what groups that user belongs to / is a member of.


(now i'm not sure where your seeing the security tab but)

When you right click a user in AD and select properties and are viewing the security Tab on a users object (having selected the advanced view) what you would be viewing is the security relating to that object within AD, and you probably don't want to be messing with it as doing so will cause issues for that user.




0
Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

 
TimSr. System AdminAuthor Commented:
The reason I am questioning the Security tab is because there is the Administrator role, Exchange administrator role, Backup operator role, etc... and I don't want the users to have the admin role which I see they don't have in the Member of tab but want to clean up any unnecessary roles in the Security tab.  
0
 
Darius GhassemCommented:
Those roles need to be in the Security tab those are default roles added so they can perform their duties on users and AD.
0
 
Mike ThomasConsultantCommented:
"The reason I am questioning the Security tab is because there is the Administrator role, Exchange administrator role, Backup operator role, etc... and I don't want the users to have the admin role which I see they don't have in the Member of tab but want to clean up any unnecessary roles in the Security tab. "

They are they so those groups (administartive groups) can manage the user, not the other way arround.

If you are the administrator and are part of those groups (as you should be) then they give you permission to modify the users opbject,..make sense?
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now