?
Solved

Grant AD Service Accounts Read Access to All AD User Accounts

Posted on 2013-01-09
2
Medium Priority
?
2,509 Views
Last Modified: 2013-01-11
Our company is working on a SharePoint BI deployment and I need to give two AD service accounts read permission to all AD user objects. I can do this one AD user at a time but this would take a long time and I would have to do it for each new user. How do I grant read access to these two service accounts for all current and future AD user account objects?
0
Comment
Question by:jwiang4u
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 15

Accepted Solution

by:
achaldave earned 2000 total points
ID: 38759194
By default domain users can read almost all objects in AD, you can use delegation wizard to provide any additional permissions

http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html
0
 
LVL 17

Expert Comment

by:Tony Massa
ID: 38765931
All domain users are part of the "Authenticated Users" group, and by default have full read permissions on the domain partition (users/groups/OUs/etc.)  You should not have to do anything for READ-ONLY access.
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Suggested Courses
Course of the Month13 days, 21 hours left to enroll

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question