ested it thouroughly in a test network
-Original Message-
From: Gideon Ashcraft <[EMAIL PROTECTED]>
Sent: Sep 27, 2004 11:40 AM
To: "Mulnick,Al" <[EMAIL PROTECTED]>
Subject: RE: [ActiveDir] Bizzare problem
The policy is history, basically the act of adding administrator
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Bizzare problem
OK, here's the latest: the restricted groups policy did remove the
domain admin from the local administrator account on the DC's (net
localgroup administrators came back with just local administrator (which
is the domai
11 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Bizzare problem
I am sure I am asking the obvious here - but for the sake of clarity
Why don't you just modify the restricted group you created
(Administrators) and include all the users/groups that you want to
forcibly place in that gro
A good tool for Admin passwords is the Locksmith one from
sysinternals.com
successfully.
Un-initialize configuration engine...
Regards,
Aric
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gideon Ashcraft
Sent: Monday, September 27, 2004 4:34 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Bizzare problem
I already tried that
ft
Sent: Monday, September 27, 2004 6:34 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Bizzare problem
I already tried that, the restricted group policy only strips the
memberships for that group, it does not reapply. It is an extremely
dangerous policy to casually use (especially in the default domai
licy to process during
every processing cycle-foreground or background.
Hope that helps.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gideon Ashcraft
Sent: Monday, September 27, 2004 4:34 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Bizzare problem
_
From: [EMAIL PROTECTED] on behalf of Rick Kingslan
Sent: Mon 9/27/2004 5:41 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Bizzare problem
Huh. I hate to say, nope - that's not the way it works, but I guess what
else should one say? It apparently is working that way in your
]
Subject: RE: [ActiveDir] Bizzare problem
>>>I'm somewhat surprised by your experience with Restricted Groups, as
>>>I'm
using it very effectively in our 25k seat environment.
Don't be surprised, Rick. Remember that the RG thingy was redesigned to work
"properl
