We are in the preliminary stages of that right now, in fact I have one of the junior SAs writing up documentation for the procedure on how to configure the domain controllers to allow trusted OU Admins the ability to read-only certain domain controller Event View logs.
I figure I can assist the OU Admins troubleshoot user problems and give the junior SA some documentation writing experience. Dan > -------- Original Message -------- > Subject: RE: [ActiveDir] Server 2003 "DNS Admins" group permissions > From: "Gorder, Lee E Mr CTNOSC/GD-NS" <[EMAIL PROTECTED]> > Date: Thu, April 06, 2006 2:46 pm > To: "'[email protected]'" <[email protected]> > > Dan, > > You guys doing that now? > > Lee > > > > -----Original Message----- > From: Daniel Gilbert [mailto:[EMAIL PROTECTED] > Sent: Thursday, April 06, 2006 2:38 PM > To: [email protected] > Subject: RE: [ActiveDir] Server 2003 "DNS Admins" group permissions > > Yeah Sergio, > > You could even use that that information to say...allow OU Admins the > ability to view the logs of the domain controllers local to them. > > Dan > > -------- Original Message -------- > > Subject: RE: [ActiveDir] Server 2003 "DNS Admins" group permissions > > From: "Olivarez, Sergio J Mr CTNOSC/GD-NS" > > <[EMAIL PROTECTED]> > > Date: Thu, April 06, 2006 12:49 pm > > To: [email protected] > > > > Here is a link of what Ulf is talking about: > > > > http://support.microsoft.com/default.aspx?scid=kb;en-us;323076 > > > > > > Thanks, > > Sergio > > > > -----Original Message----- > > From: Ulf B. Simon-Weidner [mailto:[EMAIL PROTECTED] > > Sent: Thursday, April 06, 2006 12:41 PM > > To: [email protected] > > Subject: RE: [ActiveDir] Server 2003 "DNS Admins" group permissions > > > > Might be - you know that you can delegate any eventlog by adjusting the > > CustomSD Registrykey underneath the specific eventlog in the registry? > > > > Gruesse - Sincerely, > > > > Ulf B. Simon-Weidner > > > > MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz > > Weblog: http://msmvps.org/UlfBSimonWeidner > > Website: http://www.windowsserverfaq.org > > Profile: > > > http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B489-F2F1214C811 > > D > > > > > > > > |-----Original Message----- > > |From: [EMAIL PROTECTED] > > |[mailto:[EMAIL PROTECTED] On Behalf Of > > |Thommes, Michael M. > > |Sent: Thursday, April 06, 2006 5:54 PM > > |To: [email protected] > > |Subject: [ActiveDir] Server 2003 "DNS Admins" group permissions > > | > > |The default "DNS Admins" group has permission to use the DNS GUI > > |(dnsmgmt.msc) and to make changes in it but does not have > > |permission to view the DNS event log (DnsEvent.Evt). Would > > |this just be an oversight on Microsoft's part? > > | > > |TIA, > > |Mike Thommes > > |List info : http://www.activedir.org/List.aspx > > |List FAQ : http://www.activedir.org/ListFAQ.aspx > > |List archive: > > |http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
