?
Solved

High permission global groups

Posted on 2012-03-22
1
Medium Priority
?
196 Views
Last Modified: 2012-08-13
If there is no documentation, where would you start in risk assessing the more priveledged domain groups in an AD? I.e. those who have vast powers to access many resources. I know their are the obvious ones such as domain admins/enterprise admins etc, but I wasnt sure where an admin would start to identify non default created accounts.
0
Comment
Question by:pma111
1 Comment
 
LVL 70

Accepted Solution

by:
KCTS earned 2000 total points
ID: 37753685
Groups that you create will only have the permissions that you give them, the list of defauklt groups can be found at http://technet.microsoft.com/en-us/library/cc756898(v=ws.10).aspx
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
Sometimes it necessary to set special permissions on user objects.  For instance when using a Blackberry server, the SendAs permission needs to be set. I see many admins struggle with the setting that permission only to see it disappear within a few…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

589 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question