Announcement

Collapse
No announcement yet.

Restricting Users & Computers for Certain Administrators

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Restricting Users & Computers for Certain Administrators

    Hello Folks,

    I have an outsourced IT organization and I will need to give them Domain Admin. Although I trust them, I still want to limit the potential for stuff that could happen.

    What I would like to do is restricit their access to Users & Groups, Sites & services or even Administrative Tools.

    Can I do this specifically via Group Policy for a the user/group I add them in? Can I do it via Delegate contol?

    Or, other suggestions?

    Thanks...BirdDog

  • #2
    Re: Restricting Users & Computers for Certain Administrators

    If they are domain admins they can easily override the settings.
    So yes, you can limit them but it has no use.
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: Restricting Users & Computers for Certain Administrators

      You could create a custom group and add them to that, and using group policy you could make that custom group part of say, the 'power users' on the client Pcs

      Does this sound like a viable option?

      Comment


      • #4
        Re: Restricting Users & Computers for Certain Administrators

        Yes...that sounds interesting. So with that, they won't be able to access the Administrative Tools?

        Comment


        • #5
          Re: Restricting Users & Computers for Certain Administrators

          Let me ask a slightly different question: why do those people need Domain Admins rights ?
          What are the specific tasks they are supposed to perform ?
          Guy Teverovsky
          "Smith & Wesson - the original point and click interface"

          Comment

          Working...
          X