Title: Message
|
Domain
user rights and domain group memberships apply to Domains, and all DC's in said
domains, not OU's, you can't grant or revoke them on individual machines. I
don't really get what it would buy you anyway...
My reasoning for considering a move is to
hopefully gain control over some subsets of DC's. Such as to allow one
group backup operator rights to a subset of DC's. Or to allow one group
to have log on locally rights to just a subset of DC's. Or to assign
server operator rights to a group of local admins at a small branch
site.
|
