How to restrict the access of Active Directory

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I am using Win2003 DC and want to secure the access to the active directory
as more than one administrators are available.

I user addition or change in the users permissions should be able to do with
the name "administrator" only, Other users who are equalent to administrator
cann't do this.

Is it possible restrict, If so please do let me know the details as early as
possible.


Shanthi
 
Shanthi said:
I am using Win2003 DC and want to secure the access to the active directory
as more than one administrators are available.

I user addition or change in the users permissions should be able to do with
the name "administrator" only, Other users who are equalent to administrator
cann't do this.

Is it possible restrict, If so please do let me know the details as early as
possible.
Click to expand...

Maybe - not really. You have it sort of backwards...

Do it this way... Create users who are NOT administrators
and GIVE THEM the privilege they need.

Almost always privileges should be GIVEN rather than
first giving all and trying to remove the "excess".

There are some (very few) exceptions but most such
issues are due to fighting the design of the system or
just bad solution design.

Security principle:
Start with NOTHING -- give what is needed (and only
what is needed.)
 
Back
Top