RE: [ActiveDir] enterprise-wide accounts

2004-04-21 Thread Grillenmeier, Guido
OU. At the same time, the other members of the Adminstrators group remain in this group as well. /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, MarkSent: Mittwoch, 21. April 2004 16:55To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts

RE: [ActiveDir] enterprise-wide accounts

2004-04-21 Thread Creamer, Mark
OK, thanks Guido. That helps a lot. Back to the lab! mc -Original Message- From: Grillenmeier, Guido [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 21, 2004 2:50 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] enterprise-wide accounts you can only change the groups

RE: [ActiveDir] enterprise-wide accounts

2004-04-14 Thread Celone, Mike
] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, GuidoSent: Tuesday, April 13, 2004 6:23 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts won't Restricted groups remove any groups that are in the administrators group now except for the ones you specify

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread Depp, Dennis M.
What about adding them to each domain admins group for each domain? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, MarkSent: Tuesday, April 13, 2004 4:05 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] enterprise-wide accounts Wed like to eventually trim down the

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread Cary, Mark
Could you use a Universal Group? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 13, 2004 3:16 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] enterprise-wide accounts What about adding them to each domain admins group for each domain

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread Grillenmeier, Guido
Admins group or any other UG you assign for the task. /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Depp, Dennis M.Sent: Dienstag, 13. April 2004 22:16To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts What about adding them to each domain admins

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread Mike Celone
t: Tuesday, April 13, 2004 5:47 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts domain admins is a global group and as such you can't add users from other domains to it. While other global groups can be converted to universal groups, you can't do so for the domain adm

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread Matja Ladava
: Tuesday, April 13, 2004 10:16 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts What about adding them to each domain admins group for each domain? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, MarkSent: Tuesday, April 13, 2004 4:05

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread Grillenmeier, Guido
lf Of Mike CeloneSent: Mittwoch, 14. April 2004 00:07To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts Alternatively you can do what we do here. We have a startup script that runs from a GPO that adds a group to the local administrators group everytime the machine is

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread joe
] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, GuidoSent: Tuesday, April 13, 2004 6:23 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts won't Restricted groups remove any groups that are in the administrators group now except for the ones you specify

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread joe
You can notadd (haven't tried to hack this, probably is hard coded functionality) foreignusers to the domain admin groupof adomain, they must exist in the same domain - domain admins is a global group, standard rules apply. The best would be administrators group membershipwhich, unlike NT4,