Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
Local group modification permission
Name: papono Date: August 28, 2007 at 11:12:39 Pacific OS: Win2k3 Ent CPU/Ram: P4 Xeon MP, 16GB Product: HP
Comment:
this is something of an unusual situation.
I have come into a setup where the administrator on a Win2k3 machine has setup a couple of operators in the "Power Users" group so they may "perform activities." One of the permissions they have by default is the ability to modify group memberships. I would like to remove their ability to modify group memberships, but only for certain groups. Would anyone know where this may be done?
It's a standalone box and not a member of a domain, so AD delegation is not an option. Any ideas would be greatly appreciated.
Summary: Please help, I created a number of global security groups when I should have created Domain Local security groups. I deleted the global groups and created the domain local groups with the same names. ...
Summary: I've been reading about the users and group creation AGDLP, as stated accounts are made members of global groups which in turn are members of domain local groups and finally the permissions are ap...
