|
Can't be done. Domain admins own the domain (and can own
the forest if they're persistent about it). You can make it perhaps a little
inconvenient for them to add users, but you can prevent them from doing
it.
-gil From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of "Sanz de León, Juan Carlos" Sent: Thursday, July 29, 2004 4:15 AM To: 'ActiveDir@mail.activedir.org' Subject: [ActiveDir] Is it possible ? deny domain admins create new user permission Dear Gurus, We are currently working on a project where we need to deny domain administrators the permission to "create new users".(and assign it to some other group) Is this technically possible ? Has anyone actually done it before ? Thanks in advance for your help, Juan Carlos Sanz |
Title: Message
- RE: [ActiveDir] Is it possible ? deny domain admins create... Gil Kirkpatrick
