page 1 of 1
Comments: 3 | Views: 496
#Jul 11th @ 2:16 AM
Remon
Remon
Hey,
   I have this business problem @ my company:
I have 3 Active Directory administrators X, Y, Z
I want to apply something on user X that prevents other administrators (Y,Z) from resetting or taking control of the administrator X.
I am using Active Directory on Windows Server 2008.
Thanks,
Remon
#Jul 11th @ 2:44 AM
AndyC
AndyC
Why are they Administrators if you don't trust them?

Ultimately anything you could do to prevent them resetting a password, they could just as easily undo. If you don't want them to be able to act as Administrators, don't make them Administrators.
#Jul 11th @ 5:10 PM
Matthew van Eerde
Matthew van Eerde
AKA Maurits
You could make forests under the main Active Directory root and give them each Absolute Powah on their own forest, without making them root-level Administrators.
#Jul 13th @ 8:26 AM
Yggdrasil
Yggdrasil
Pour me a cab, 'cause I can't drink no more.
What you need to do is go into Domain Users and Computers and press Ctrl-Shift-F-N-O-R-D. This is a secret cheat code to activate Domain God Mode. In this mode no other admin can touch your permissions, and your group policies always run first.
Be careful, though. When in this mode pressing Ctrl-Alt simultaneously will cause random domain-member servers to explode.

[/snarky]
page 1 of 1
Comments: 3 | Views: 496