Solved

ADUC

Posted on 2011-02-15
5
388 Views
Last Modified: 2013-11-05
What are the liscence agreements around the ADUC console? I could use it on my machine for admin work but I am not sure if I need a liscence for it? Can anyone confirm?
0
Comment
Question by:pma111
  • 3
  • 2
5 Comments
 
LVL 39

Accepted Solution

by:
Krzysztof Pytko earned 125 total points
ID: 34895421
Nope, it's free to use. You need only CALs for your domain but this tools is free and it's part of Administrative Tools.

Regards,
Krzysztof
0
 
LVL 3

Author Comment

by:pma111
ID: 34895517
Can I just check, can ADUC be used for updating AD related information, or is it more just a query/read-only tool. If it can be used for udating information, is that dependant on the users priveleges in the domain, i.e. typically any major updates would require domain admin rights.

I was just thinking worst case what can a basic user potentially do with ADUC, as if there is a risk I can see the request being put down...
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 34895532
Do not install ADUC for regulra users :) They don't need that, and could be scarry :) Regular users have read-only access in ADUC

When you are Enterprise/Domain Admin you have full read/write permissions. You can also delegate rights to other users and they will be able to manage that delegated part.

Krzysztof
0
 
LVL 3

Author Comment

by:pma111
ID: 34895574
Sorry no it is for our audit team, by regular users I just meant users with no elevated permissions in the domain, i.e. just members of domain users, not domain admins...
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 34895577
OK, then. They will only have read-only access to objects in ADUC

Krzysztof
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now