Re: Restrict the Domain Admin

[Cam Fischer <camfischer () gmail com>]

NetIQ and Quest have role based applications to do what you need, it
also comes with full auditing and reporting!!

...Cam

On 16 Sep 2005 10:11:38 -0000, sf_mail_sbm () yahoo com
<sf_mail_sbm () yahoo com> wrote:
> Hi List,
> Is there a way to restrict access of a Domain Admin?
>
> Example, can we allow a Dommain admin to do everything EXCEPT user management (e.g. password reset)?
>
> We want to secure our environment, and do not want to have "ALL-POWERFULL" domain admins around
>
> Thanks for your suggestions
>
> P.S. Environment: Windows (2000 & 2003) - Active Directory