Active Directory, Security Tab vs Member of

I would like to know the difference between the secuity tab on profiles and the Member of tab. I believe the security tab is for access to the profile and the Member of tab is for the user level access. I ask this because there a number of roles in the security tab of a user profile but in the member of tab they user only has Domain Users. How are the two related\not related? I am trying to clean up my active directory and set new security standards but want to make sure I am making the right changes without breaking my active directory and removing roles that don't need to be removed.

Thank You in advance.
TimSr. System AdminAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Darius GhassemCommented:
Member of describes what groups the user is in within the AD domain. This allows you to view all group memberships at once.

Here is a link on Security Tab.
http://www.lockergnome.com/windows/2005/11/08/find-the-security-tab-in-active-directory/
0
InderjeetjaggiCommented:
Member of give you information as to you are memeber of which all groups
Security tab has permission for these groups.

Hope it helps
Inderjeet
0
Mike ThomasConsultantCommented:
As everyone else has said

When you right click a user in AD and select properties the "Member Of" Tab shows you what groups that user belongs to / is a member of.


(now i'm not sure where your seeing the security tab but)

When you right click a user in AD and select properties and are viewing the security Tab on a users object (having selected the advanced view) what you would be viewing is the security relating to that object within AD, and you probably don't want to be messing with it as doing so will cause issues for that user.




0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

TimSr. System AdminAuthor Commented:
The reason I am questioning the Security tab is because there is the Administrator role, Exchange administrator role, Backup operator role, etc... and I don't want the users to have the admin role which I see they don't have in the Member of tab but want to clean up any unnecessary roles in the Security tab.  
0
Darius GhassemCommented:
Those roles need to be in the Security tab those are default roles added so they can perform their duties on users and AD.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Mike ThomasConsultantCommented:
"The reason I am questioning the Security tab is because there is the Administrator role, Exchange administrator role, Backup operator role, etc... and I don't want the users to have the admin role which I see they don't have in the Member of tab but want to clean up any unnecessary roles in the Security tab. "

They are they so those groups (administartive groups) can manage the user, not the other way arround.

If you are the administrator and are part of those groups (as you should be) then they give you permission to modify the users opbject,..make sense?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.