RE: [ActiveDir] OT: AD MMC Snap ins

[Rick Kingslan]

If the AdminPak has never been installed on a given system, the snap-ins that are the Administrative Tools – say, ADUC, should not be available.   Are you saying that you have the snap-ins on a Win2k3 system with SP1 that you are certain the AdminPak was not installed on?  I’m unclear as to exactly what you’re asking.    And, yes – I do view it as some degree of a Security Risk.  As to how high of a risk, that all depends on factors in your environment.   Rick   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Friday, August 19, 2005 2:15 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OT: AD MMC Snap ins   Dear All,   On a Windows Server 2003 Service Pack 1 member server that has not had the Adminpak.msi installed, so no AD tools appear in the Administrative tools on the Start Menu or in the control panel. If a new MMC is run from the command line and Add\Remove snap-in is selected should the AD Admin tools listed and registered (such as DSA.MSC)?   I have had this on a test machine tonight and for me it’s potentially a security issue.   Many thanks   Mark