Deny account management to certain administrative users

  • Thread starter Thread starter Hodo
  • Start date Start date
H

Hodo

I need to be able to have users who are Domain Admins in everyway
except that they can't add/delete users/groups or reset passwords. Is
there anyway to do this? Thanks...
 
Not really. You can try to use Group Policy to restrict ANY user to a mmc
console but if they know or find out they are an administrator they can
ultimately grant themselves access if they know how. --- Steve
 
Back
Top