Announcement

Collapse
No announcement yet.

Restrict Domain Admins .....

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Restrict Domain Admins .....

    Is there a way that I can restrict my Domain Admins from adding users to the Domain Admin group?

    Thanks,
    -N

  • #2
    Re: Restrict Domain Admins .....

    If you dont trust your domain admins then should they really be domain admins??

    Michael
    Michael Armstrong
    www.m80arm.co.uk
    MCITP: EA, MCTS, MCSE 2003, MCSA 2003: Messaging, CCA, VCP 3.5, 4, 5, VCAP5-DCD, VCAP5-DCA, ITIL, MCP, PGP Certified Technician

    ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

    Comment


    • #3
      Re: Restrict Domain Admins .....

      Yeah no kidding but ..... as corporate crap goes ...... it's political.

      -N

      Comment


      • #4
        Re: Restrict Domain Admins .....

        You can't. As long as you are member of Domain Admins group you can't prevent people from having full control over the whole domain.

        You can change the permissions on adminSDHolder (google for it), but another DA will ALWAYS have a way to revert the changes.

        If you do not trust someone, do not give him DA account.
        Guy Teverovsky
        "Smith & Wesson - the original point and click interface"

        Comment

        Working...
        X