So, is that what you've been doing in this last 'Joe has gone missing' period? Putting the final touches on CPAU?
Good to hear from you and your butt generated sarcasm..... ;P Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone WebLog - www.msmvps.com/willhack4food -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Sent: Sunday, December 07, 2003 8:53 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Delegation of control for WINS You know though... On further reflection. You could use CPAU with the job functionality to fire the WINS console as an admin... You would want to check for security implications like seeing if the MMC can be made to do other things by adding more snapins or whatever... Something like this [Sun 12/07/2003 9:50:19.28] F:\Dev\cpp\CPAU>cpau /u joehome\joe /p password /ex "mmc c:\windows\system32\winsmgmt.msc" /enc /file wins.job CPUA V01.02.00cpp Joe Richards ([EMAIL PROTECTED]) December 2003 Attempting to create CPAU job file: wins.job The command completed successfully. [Sun 12/07/2003 9:50:28.82] F:\Dev\cpp\CPAU>cpau /dec /file wins.job CPUA V01.02.00cpp Joe Richards ([EMAIL PROTECTED]) December 2003 Attempting to use job file wins.job Successfully Processed File Process Created... The command completed successfully. [Sun 12/07/2003 9:50:39.67] F:\Dev\cpp\CPAU> Oh yeah, CPAU is available on the free win32 tools page of www.joeware.net joe -- www.joeware.net -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Sent: Saturday, December 06, 2003 10:55 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Delegation of control for WINS WINS isn't something that can be delegated off... I doubt MS will put much work into doing it either since they truly want to kill it although I like it. :o) joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gregoire Maux Sent: Thursday, December 04, 2003 8:11 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Delegation of control for WINS Dennis, - If we are in the case that the WINS Server is also a DC, what could be the solution? Thanks & Regards ******************************************** Gregoire MAUX Network & Security Consultant Schlumberger Network Solutions Mail: [EMAIL PROTECTED] Phone: + 33 (0)1 46 00 47 80 Fax: + 33 (0)1 46 00 44 83 ******************************************** -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of W2K List Sent: Thursday, December 04, 2003 2:56 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Delegation of control for WINS To manage a WINS server, the user has to be a local administrator on the WINS box. As long as your WINS servers are not domain controllers, this is not a problem. If your domain controllers are performing double duty as WINS servers well.... You might consider standing up one member server as a WINS server. Any local admins on this machine will be able to manage WINS from this server. Dennis -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gregoire Maux Posted At: Wednesday, December 03, 2003 7:57 AM Posted To: W2K List Conversation: [ActiveDir] Delegation of control for WINS Subject: [ActiveDir] Delegation of control for WINS Dennis and members, - I saw in ActiveDir archives that you asked (see below mail) if it is possible to have account dedicated to do WINS administration. At that time, you did not receive any clear answer on that. - Could you please tell what you did in fact? What access rights did you give to people in charge of WINS service? - One more question, I am wondering if you still have many WINS Server in your architecture or if you reduce its number as some other administrators strongly suggest you to do? - Many thanks in advance for your help. > > > > > -----Original Message----- > > > > > From: Dennis Meyer [mailto:[EMAIL PROTECTED] > > > > > Sent: Friday, October 11, 2002 12:43 PM > > > > > To: '[EMAIL PROTECTED]' > > > > > Subject: [ActiveDir] WINS administration > > > > > > > > > > > > > > > Anyone: > > > > > We would like to control who has the ability to make > > > > > modifications to WINS, like adding static entries, > tombstoning > > > > > bad records,....etc. We have deployed Active > Directory DC's to > > > > > several nationwide offices and want to be able to > delegate this > > > > > control to local administrators without making them a domain > > > > > admin. There is a built in group called DNS Admins > that allows > > > > > this kind of functionality and you can set permissions on DNS > > > > > zones so that only certain accounts can add/delete zone > > > > > entries...etc. but there is no > > > > > corresponding WINS admin group. Does anyone know of a way > > > > > to accomplish this kind of delegation of control for WINS? > > > > > > > > > > Thanks for any help you can provide, Thanks & Regards ******************************************** Gregoire MAUX Network & Security Consultant Schlumberger Network Solutions Mail: [EMAIL PROTECTED] Phone: + 33 (0)1 46 00 47 80 Fax: + 33 (0)1 46 00 44 83 ******************************************** List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
