, June 09, 2005 10:26 AM
To: 'Rimmerman, Russ '; Jorge de Almeida Pinto; 'Robert Williams (RRE) ';
'ActiveDir@mail.activedir.org '
Subject: RE: [ActiveDir] Security permissions on user object
I think the krbtgt account will also be listed.
To get all objects (users and groups) with admincount =1
, Russ [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 08, 2005 10:52 PM
To: Robert Williams (RRE); ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Security permissions on user object
Can I just use ADSIEDIT and go to individual users and set the
admincount to 0? Will that stick
?
From: Jorge de Almeida Pinto [mailto:[EMAIL PROTECTED]
Sent: Thu 6/9/2005 2:41 AM
To: 'Robert Williams (RRE) '; '[EMAIL PROTECTED] '; Rimmerman, Russ;
'ActiveDir@mail.activedir.org '
Subject: RE: [ActiveDir] Security permissions on user object
If you look at MS-KBQ817433
@mail.activedir.org
Subject: RE: [ActiveDir] Security permissions on user object
In fact, yes it will, Russ.
Looking back at the thread, I don't see any discussion about HOW these users
came to have the admincount attribute set to 1. Do you have a root cause?
The reason that I ask is because
Subject: RE: [ActiveDir] Security permissions on user object
In fact, yes it will, Russ.
Looking back at the thread, I don't see any discussion about HOW these
users came to have the admincount attribute set to 1. Do you have a
root cause?
The reason that I ask is because I've dealt
FSMO resets all accounts that you
did not want to change
#JORGE#
-Original Message-
From: Rimmerman, Russ
To: Jorge de Almeida Pinto; Robert Williams (RRE) ;
ActiveDir@mail.activedir.org
Sent: 6/9/2005 12:53 PM
Subject: RE: [ActiveDir] Security permissions on user object
But is it safe
Subject: RE: [ActiveDir] Security permissions on user object
OK this is odd, I changed admincount to 0 and an hour later it was
changed back to 1. How frustrating. What gives?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan
Sent: Wednesday
We
migrated all our users from an NT4 domain to our AD domain. Anyone who was
in "Domain Admins" on our NT4 domain got migrated into "Domain Admins" on our AD
domain. We took them out of Domain Admins on our AD domain, but their
accounts are inheriting the permissions like a normal user
=kb;en-us;318180
http://support.microsoft.com/default.aspx?scid=kb;en-us;817433
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman,
RussSent: Wednesday, June 08, 2005 12:26 PMTo:
ActiveDir@mail.activedir.orgSubject: [ActiveDir] Security permissions
on user object
We
Response Engineer
Northeast Region
MicrosoftCorporation
Global Solutions Support Center
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob
Sent: Wednesday, June 08, 2005
4:00 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Security
permissions on user
@mail.activedir.org
Subject: RE: [ActiveDir] Security permissions on user object
It ssounds like it's the adminSDHolder behavior that's getting you. Are the
users members of any of the other protected groups? It varies across versions,
IIRC 2003 added more groups. The articles below should help
Northeast Region
MicrosoftCorporation
Global Solutions Support Center
From: Rimmerman, Russ
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 08, 2005
8:38 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Security
permissions on user object
OK looks like ya'll
] On Behalf Of Rimmerman, Russ
Sent: Wednesday, June 08, 2005 9:52 PM
To: Robert Williams (RRE); ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Security permissions on user object
Can I just use ADSIEDIT and go to individual users and set the admincount to
0? Will that stick? If that works, I
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 08, 2005 10:52 PM
To: Robert Williams (RRE); ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Security permissions on user object
Can I just use ADSIEDIT and go to individual users and set the
admincount to 0? Will that stick? If that works, I
14 matches
Mail list logo
