unsubscribe full-disclosure

["Makousky, Steve C" <SMAKOUS1 () Fairview org>]

unsubscribe full-disclosure
 
----------------------------------
Steve Makousky CISSP, CNE, MCP
Fairview Health Services
Lead Information Security Analyst
smakous1 () fairview org
W # - 612.672.6788
P # -
00110110 00110001 00110010 00101110 00110110 00110001
00110011 00101110 00110110 00111001 00110011 00111001
----------------------------------

 

________________________________

From: full-disclosure-bounces () lists grok org uk
[mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of Joel R.
Helgeson
Sent: Sunday, December 02, 2007 9:19 PM
To: 'happy nino'; bugtraq () securityfocus com;
full-disclosure () lists grok org uk
Subject: Re: [Full-disclosure] need help in managing administrators



Launch "Active Directory Users & Computers"

Listed you have the AD containers used to hold all your objects, select
a tree, right-click the container, click properties. There is a tab
called "Delegate Control" where you can delegate management of the
objects located in that container to whatever groups or individuals you
want.  It is best to create a user group, then delegate the control to
the group rather than the user.


This is where it is important that you have your AD containers set up
properly...

 

Hope that helps provide some direction...

 

Joel Helgeson

 

 

From: full-disclosure-bounces () lists grok org uk
[mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of happy
nino
Sent: Sunday, December 02, 2007 3:42 AM
To: bugtraq () securityfocus com; full-disclosure () lists grok org uk
Subject: [Full-disclosure] need help in managing administrators

 

         

        Hi All,
        i've a problem in my organization that we have several domain
admins, we are in the process of removing most of them but i need to
have a person only authorized to install
        new software to users' computers but without having access to
other parts of the users machines, is this possible ?..can i delegate a
function like this only to certain users with out
        being domain admins?
        Appreciate your great help
        thanks alot 
        
        regards,
        Nad
        
        
         

 

________________________________

Get closer to the jungle. I'm a Celebrity Get Me Out Of Here!
<http://entertainment.uk.msn.com/tv/realitytv/im-a-celebrity/> 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/