Accounts operators have more permissions that just resetting passwords.
Here is the information from MS documentation.
Account Operators
Members of this group can create, modify, and delete accounts for users,
groups, and computers located in the Users or Computers containers and
It is called: Microsoft Advanced Group Policy Management
http://download.microsoft.com/download/6/4/F/64F5DC66-832A-4DF3-BAF4-3B4
E7FB9E500/datasheet-agpm.pdf
This will be part of the Desktop Optimization package:
http://www.microsoft.com/windowsvista/getready/optimizeddesktop.mspx
happy
I got curios about this and decide to dcpromo my vm image of windows
2003 R2.
After the AD installation (which sits at Windows 2000 for domain type) I
raised the functionality for the domain and forest.
The result for domain type was windows 2000.
I am not sure it is supposed to be different.
like I need to edit the GINA.dll and enable fast user
switching but that doesn't sound right to me...
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tim Onsomu
Sent: Thursday, October 26, 2006 9:43 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Change a password
Use And LDAP Browser (eg. LDAP Softerras
free product at: http://www.ldapbrowser.com/download/index.php)
Search for attributed asAMAccountName,homedirectory.
Set you filter to exclude computers and you are set.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of
Hello group,
Before you go testing or creating a proof of concept, may I
suggest you document you requirements so that you have a basis for testing the
products. Otherwise you are at the mercy of the product vendors.
Have a pleasant day.
From:
[EMAIL PROTECTED] [mailto:[EMAIL
The option chosen for my environment is:
c) Invest in a fancy log management system that will collect, index, and
retain all of your logs.
The product we employ is EventSenty
(http://www.eventsentry.com/features.php?FEATURE=EVENTLOG) Though not
that fancy but good enough to do what is needed.
