Security Basics mailing list archives
Re: Restrict the Domain Admin
From: Cam Fischer <camfischer () gmail com>
Date: Tue, 20 Sep 2005 19:47:20 -0600
NetIQ and Quest have role based applications to do what you need, it also comes with full auditing and reporting!! ...Cam On 16 Sep 2005 10:11:38 -0000, sf_mail_sbm () yahoo com <sf_mail_sbm () yahoo com> wrote:
Hi List, Is there a way to restrict access of a Domain Admin? Example, can we allow a Dommain admin to do everything EXCEPT user management (e.g. password reset)? We want to secure our environment, and do not want to have "ALL-POWERFULL" domain admins around Thanks for your suggestions P.S. Environment: Windows (2000 & 2003) - Active Directory
Current thread:
- Restrict the Domain Admin sf_mail_sbm (Sep 16)
- Re: Restrict the Domain Admin Christos Triantafyllidis (Sep 19)
- Re: Restrict the Domain Admin G. Chomic (Sep 19)
- Re: Restrict the Domain Admin Raoul Armfield (Sep 19)
- Re: Restrict the Domain Admin Pete Hunt (Sep 19)
- RE: Restrict the Domain Admin Brian Loe (Sep 19)
- Re: Restrict the Domain Admin cc (Sep 20)
- Re: Restrict the Domain Admin Cam Fischer (Sep 22)
- Re: Restrict the Domain Admin Glenn English (Sep 26)
- <Possible follow-ups>
- RE: Restrict the Domain Admin Brunner, Mark (Sep 19)
- RE: Restrict the Domain Admin Robert McIntyre (Sep 20)
- RE: Restrict the Domain Admin Craig Wright (Sep 22)
- RE: Restrict the Domain Admin Charles Otstot (Sep 26)
- RE: Restrict the Domain Admin Brian Loe (Sep 26)
- RE: Restrict the Domain Admin Depp, Dennis M. (Sep 22)
- RE: Restrict the Domain Admin Craig Wright (Sep 26)
- RE: Restrict the Domain Admin Craig Wright (Sep 26)
- Re: RE: Restrict the Domain Admin sf_mail_sbm (Sep 30)