OU. At the same time, the
other members of the Adminstrators group remain in this group as
well.
/Guido
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Creamer,
MarkSent: Mittwoch, 21. April 2004 16:55To:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
OK, thanks
Guido. That helps a lot. Back to the lab!
mc
-Original Message-
From: Grillenmeier, Guido
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 21, 2004
2:50 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir]
enterprise-wide accounts
you can only change the
groups
]
[mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier,
GuidoSent: Tuesday, April 13, 2004 6:23 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
won't Restricted groups remove any groups that are in
the administrators group
now except for the ones you
specify
What about adding them to each domain admins group for each
domain?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Creamer,
MarkSent: Tuesday, April 13, 2004 4:05 PMTo:
[EMAIL PROTECTED]Subject: [ActiveDir] enterprise-wide
accounts
Wed
like to eventually trim down the
Could you use a Universal Group?
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, April 13, 2004 3:16 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] enterprise-wide accounts
What about adding them to each domain admins group for each domain
Admins group or any other UG you assign for the
task.
/Guido
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Depp, Dennis
M.Sent: Dienstag, 13. April 2004 22:16To:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
What about adding them to each domain admins
t: Tuesday, April 13, 2004 5:47 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
domain admins is a global group and as such you can't add
users from other domains to it. While other global groups can be converted to
universal groups, you can't do so for the domain adm
: Tuesday, April 13, 2004 10:16 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
What about adding them to each domain admins group for each
domain?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Creamer,
MarkSent: Tuesday, April 13, 2004 4:05
lf Of Mike
CeloneSent: Mittwoch, 14. April 2004 00:07To:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
Alternatively you can do what we do here. We have a
startup script that runs from a GPO that adds a group to the local
administrators group everytime the machine is
]
[mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier,
GuidoSent: Tuesday, April 13, 2004 6:23 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
won't Restricted groups remove any groups that are in
the administrators group
now except for the ones you
specify
You can notadd (haven't tried to hack this, probably
is hard coded functionality) foreignusers to the domain admin
groupof adomain, they must exist in the same domain - domain admins
is a global group, standard rules apply. The best would be administrators group
membershipwhich, unlike NT4,
11 matches
Mail list logo