RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread Grillenmeier, Guido
nope. It'll be easier to question the fact that the developers "need admin rights" = while not easy, you could propably give them a non-admin account on the box and increase their priviledges to meet their needs. /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread Mike
Can you create a new group of these users, then apply a GPO granting them all the rights/permissions they need but simply disallowing them the Shutdown the System right? Regards, Mike Burns From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Santos, PavelSent: Monday,

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread joe
You can't guarantee to stop them but you can slow them down by creating a new group and adding it to the shutdown computer right and remove admins. I did this at a company that had previously given out admin to everyone who had any app on a server in the datacenter. The servers were

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread Mike
group. Maybe I'm missing something here. Regards, Mike Burns From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Monday, November 28, 2005 3:05 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Preventing local admin from rebooting servers You can't guarantee

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread Rocky Habeeb
PROTECTED]On Behalf Of joeSent: Monday, November 28, 2005 4:05 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Preventing local admin from rebooting servers You can't guarantee to stop them but you can slow them down by creating a new group and adding it to the shutdown computer

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread ActiveDirectory
0 PMPosted To: ActiveDirectoryConversation: [ActiveDir] Preventing local admin from rebooting serversSubject: RE: [ActiveDir] Preventing local admin from rebooting servers Just a quick question here. I thought a new group was the way to go here, being given the appropriate rights/permissions. But why woul

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread Ulf B. Simon-Weidner
: the admins would be able to grant themselves the right again Ulf From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rocky Habeeb Sent: Monday, November 28, 2005 11:01 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Preventing local admin from rebooting servers

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread joe
the right and so would the new group. Maybe I'm missing something here. Regards, Mike Burns From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Monday, November 28, 2005 3:05 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Preventing local admin from rebooting

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread joe
lto:[EMAIL PROTECTED]On Behalf Of joeSent: Monday, November 28, 2005 4:05 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Preventing local admin from rebooting servers You can't guarantee to stop them but you can slow them down by creating a new group and adding it to the shu