Hey,
I have this business problem @ my company:
I have 3 Active Directory administrators X, Y, Z
I want to apply something on user X that prevents other administrators (Y,Z) from resetting or taking control of the administrator X.
I am using Active Directory on Windows Server 2008.
Thanks,
Remon
-
-
Why are they Administrators if you don't trust them?
Ultimately anything you could do to prevent them resetting a password, they could just as easily undo. If you don't want them to be able to act as Administrators, don't make them Administrators. -
Matthew van Eerde
AKA Maurits
You could make forests under the main Active Directory root and give them each Absolute Powah on their own forest, without making them root-level Administrators.
-
Yggdrasil
Pour me a cab, 'cause I can't drink no more.
What you need to do is go into Domain Users and Computers and press Ctrl-Shift-F-N-O-R-D. This is a secret cheat code to activate Domain God Mode. In this mode no other admin can touch your permissions, and your group policies always run first.
Be careful, though. When in this mode pressing Ctrl-Alt simultaneously will cause random domain-member servers to explode.
[/snarky]
Thread Closed
This thread is kinda stale and has been closed but if you'd like to continue the conversation, please create a new thread in our Forums,
or Contact Us and let us know.