Yep, that is what I meant, I explained it a little more in another response I just sent.


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rocky Habeeb
Sent: Monday, November 28, 2005 5:01 PM
To: [email protected]
Subject: RE: [ActiveDir] Preventing local admin from rebooting servers

Dear joe,
 
Did you really mean "and remove admins" or did you mean to say "and remove TheNewlyCreatedGroup"?  If the former, could you please explain?
 
Thanks.

RH
____________________________
 
 
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of joe
Sent: Monday, November 28, 2005 4:05 PM
To: [email protected]
Subject: RE: [ActiveDir] Preventing local admin from rebooting servers

You can't guarantee to stop them but you can slow them down by creating a new group and adding it to the shutdown computer right and remove admins.
 
I did this at a company that had previously given out admin to everyone who had any app on a server in the datacenter. The servers were rebooting all of the time and no one had a clue what was going on. After that one small change, 95% of the reboots stopped and most of the folks had no clue why they all of a sudden lost that ability.
 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Santos, Pavel
Sent: Monday, November 28, 2005 11:59 AM
To: [email protected]
Subject: [ActiveDir] Preventing local admin from rebooting servers

Hello list,

 

Is there a way to prevent members of the local admin group on a server from rebooting the servers?  We are trying to prevent some developers that need admin rights from rebooting the servers. 

 

Thanks in advance,

 

Pavel



-------------------------------
-- Even though this E-Mail has been scanned and found clean of
-- known viruses, OPM can not guarantee this message is virus free.
-------------------------------
-- This message was automatically generated.
-------------------------------oo

Reply via email to