AD Roles and Responsibilites

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi
Is there any framework to follow when coming up with Active directory Roles and Responsibilites. Basically everyone is a domain admin. Is there something to follow when allocating roles to diff groups, Helpdesk, Desktop support, Admins, etc

Thanks,
 
DC,

Um, if everyone has been made a member of the Domain Admins group then you
have a very strong potential for disaster. Every user would have
essentially Admin access to pretty much everything ( except where either
Enterprise Admin or Schema Admin membership is required ).

I might look at Delegation. Do a search in this NG for delegation as there
are several examples in here.

HTH,

Cary

DCkid. said:
Hi,
Is there any framework to follow when coming up with Active directory
Roles and Responsibilites. Basically everyone is a domain admin. Is there
something to follow when allocating roles to diff groups, Helpdesk, Desktop
support, Admins, etc.
 
Back
Top