Solved

Grant AD Service Accounts Read Access to All AD User Accounts

Posted on 2013-01-09
2
2,019 Views
Last Modified: 2013-01-11
Our company is working on a SharePoint BI deployment and I need to give two AD service accounts read permission to all AD user objects. I can do this one AD user at a time but this would take a long time and I would have to do it for each new user. How do I grant read access to these two service accounts for all current and future AD user account objects?
0
Comment
Question by:jwiang4u
2 Comments
 
LVL 15

Accepted Solution

by:
achaldave earned 500 total points
ID: 38759194
By default domain users can read almost all objects in AD, you can use delegation wizard to provide any additional permissions

http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html
0
 
LVL 17

Expert Comment

by:Tony Massa
ID: 38765931
All domain users are part of the "Authenticated Users" group, and by default have full read permissions on the domain partition (users/groups/OUs/etc.)  You should not have to do anything for READ-ONLY access.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now