Re: [ActiveDir] Restricted Groups

[Al Mulnick]

Hmm... I'm not sure this is the way to go for your requirements.  Restricted groups is going to have a delay before it puts the groups back to the way they *should* be. It sounds like you need a better system for delegation.  Can you expand on your requirements?

On 5/31/06, James Carter <[EMAIL PROTECTED]> wrote:

Sorry I should clarify, by User I mean an IT Helpdesk Account Creator

 

Single Domain  Windows 2003, FFL. I have delegated rights to various Security Groups for privileges in the domain.

 

James

James Carter <[EMAIL PROTECTED] > wrote:

Hi,

 

I am thinking of making all the builtin groups apart from the Administrators group part of the Restricted Groups function.

 

I don't want any user to add themselves to the Account, Backup,Server, Print Operators group for any length of time.

 

Or does anyone know of a simpler way to acheive this?

 

Regards,

 

James

---

Be a chatter box. Enjoy free PC-to-PC calls with Yahoo! Messenger with Voice.

---

New Yahoo! Messenger with Voice. Call regular phones from your PC and save big.