That's interesting. Why not let them be
administrators on that local machine? Once they have that kind of access
what's the difference?
That said, I am not aware of any way to change the
permission on the admin shares. They're auto-created at startup if the reg
key is so set.
Interested if you find otherwise,
though.
Al
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Tuesday, September 07, 2004 10:50 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Admin Share access for Non-Admins
Security Guru question...
I read somewhere...don't know where, that it is possible to grant a power-user or otherwise non-admin the ability to access administrative shares such as admin$, c$,...etc. I believe that this is possible as of Windows 2003 and possibly Windows 2000.
I'm in a situation that we must give our Security Group proper access w/o actually making them administrators on the respective servers in AD.
Details on this possibility would be greatly appreciated.
TIA.
Eric Jones, Senior SE
Intel Server Group
(W) 336.424.3084
(M) 336.457.2591
www.vfc.com
