Computing.Net > Forums > Security and Virus > Permissions HELP!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Permissions HELP!

Reply to Message Icon

Name: Kevin Lasher
Date: August 8, 2002 at 08:20:25 Pacific
Comment:

I have programmers using a one of our servers, and they need rights to everything so they can administer the IIS portion of the server. That's fine. However, one of the programmers likes to change the admin password so when I go to login to the server to change some settings I can't.

How would I give one of them access to do everything BUT change the password of admin. (Or change passwords at all) Please let me know as the situation is getting worse. Thanks



Sponsored Link
Ads by Google

Response Number 1
Name: Bill
Date: August 8, 2002 at 08:54:06 Pacific
Reply:

Tell them that they do not have the right to change any passwords. Maybe pick one as a lead and if they change again Fire one of them. People usally respond well when playing around might cost them a meal ticket


0

Response Number 2
Name: shadow
Date: August 8, 2002 at 11:42:12 Pacific
Reply:

he's probably doing it because he doesn't want anyone to mess around with his "perfect" settings. However, if he doesn't have the authority, then he should be warned. Make it a company/department policy. Personally, I would be wary of people who change passwords...they might have an ulterior (sp) motive. If he really thought that it was important for no one else to have access, then he should explain why that is so.


0

Response Number 3
Name: vw_marc
Date: August 8, 2002 at 12:43:25 Pacific
Reply:

If the DC is a Win2k box then you can go to:
'Administrative Tools' and select 'Active Directory Users and Computers'. Click the 'Users' object and double-click your user account and select the 'Security' tab. Filter his Change Password permission out or specicallly deny it.

Done.


0

Response Number 4
Name: CLK
Date: August 8, 2002 at 12:46:19 Pacific
Reply:

Make them a new user like "IIS admins" and only give them the access IIS. I dont think they would need full admin rights to access IIS of any version.
Then you have the power to enable or disable their access and not mess with your own.


0

Response Number 5
Name: dys
Date: August 15, 2002 at 04:14:16 Pacific
Reply:

Read up on the Active Directory feature "Delegation"


0

Related Posts

See More



Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Permissions HELP!

CWS is Here!Hijackthis log pls help www.computing.net/answers/security/cws-is-herehijackthis-log-pls-help/11404.html

-help in closing open ports- www.computing.net/answers/security/help-in-closing-open-ports/6675.html

Help! What is the problem now? www.computing.net/answers/security/help-what-is-the-problem-now/17922.html