RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread Grillenmeier, Guido
nope. It'll be easier to question the fact that the developers "need admin rights" => while not easy, you could propably give them a non-admin account on the box and increase their priviledges to meet their needs.   /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sant

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread Mike
Can you create a new group of these users, then apply a GPO granting them all the rights/permissions they need but simply disallowing them the Shutdown the System right? Regards,     Mike Burns   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Santos, PavelSent: Monday, Nove

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread joe
You can't guarantee to stop them but you can slow them down by creating a new group and adding it to the shutdown computer right and remove admins.   I did this at a company that had previously given out admin to everyone who had any app on a server in the datacenter. The servers were reboo

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread Mike
group.  Maybe I'm missing something here.   Regards,     Mike Burns   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Monday, November 28, 2005 3:05 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Preventing local admin from rebooting servers You

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread Rocky Habeeb
PROTECTED]On Behalf Of joeSent: Monday, November 28, 2005 4:05 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Preventing local admin from rebooting servers You can't guarantee to stop them but you can slow them down by creating a new group and adding it to the sh

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread ActiveDirectory
Posted To: ActiveDirectoryConversation: [ActiveDir] Preventing local admin from rebooting serversSubject: RE: [ActiveDir] Preventing local admin from rebooting servers Just a quick question here.  I thought a new group was the way to go here, being given the appropriate rights/permissions.  But why would you

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread Ulf B. Simon-Weidner
admins would be able to grant themselves the right again   Ulf   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rocky Habeeb Sent: Monday, November 28, 2005 11:01 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Preventing local admin from rebooting servers

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread joe
veDir] Preventing local admin from rebooting servers Just a quick question here.  I thought a new group was the way to go here, being given the appropriate rights/permissions.  But why would you give this group the Shutdown computer right when that is the problem in the first place?  The admins would

RE: [ActiveDir] Preventing local admin from rebooting servers

2005-11-28 Thread joe
D] [mailto:[EMAIL PROTECTED]On Behalf Of joeSent: Monday, November 28, 2005 4:05 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Preventing local admin from rebooting servers You can't guarantee to stop them but you can slow them down by creating a new group and adding it