Just a quick question here. I thought a new group was
the way to go here, being given the appropriate rights/permissions. But
why would you give this group the Shutdown computer right when that is the
problem in the first place? The admins would still have the right and so
would the new group. Maybe I'm missing something here.
Regards,
Mike Burns
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Monday, November 28, 2005 3:05 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Preventing local admin from rebooting servers You can't guarantee to stop them but you can slow them down
by creating a new group and adding it to the shutdown computer right and remove
admins.
I did this at a company that had previously given out admin
to everyone who had any app on a server in the datacenter. The servers were
rebooting all of the time and no one had a clue what was going on. After that
one small change, 95% of the reboots stopped and most of the folks had no clue
why they all of a sudden lost that ability.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Santos, Pavel Sent: Monday, November 28, 2005 11:59 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Preventing local admin from rebooting servers Hello list,
Is there a way to prevent members of
the local admin group on a server from rebooting the servers? We are
trying to prevent some developers that need admin rights from rebooting the
servers. Thanks in
advance, Pavel ------------------------------- -- Even though this E-Mail has been scanned and found clean of -- known viruses, OPM can not guarantee this message is virus free. ------------------------------- -- This message was automatically generated. -------------------------------oo |
- RE: [ActiveDir] Preventing local admin from rebooting... Mike
- RE: [ActiveDir] Preventing local admin from rebo... joe
- RE: [ActiveDir] Preventing local admin from rebo... Rocky Habeeb
- RE: [ActiveDir] Preventing local admin from ... Ulf B. Simon-Weidner
- RE: [ActiveDir] Preventing local admin from ... joe
- [ActiveDir] AD with mix DC Antonio Aranda
- RE: [ActiveDir] Preventing local admin from rebo... ActiveDirectory