that. ;o)
joe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan
Sent: Tuesday, February 22, 2005 10:49 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Is it possible ? deny domain admins create new us
er permission
> admi
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Tuesday, February 22, 2005 9:07 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Is it possible ? deny domain admins create new us
er permission
adminSDHolder shouldn't come into play here. That controls permissions ON
the
n Behalf Of Rick Kingslan
Sent: Tuesday, February 22, 2005 8:05 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Is it possible ? deny domain admins create new us
er permission
Hmmm. OK, I'm inclined to agree, but aren't DA's and EA's governed by the
same set of ACLs and
: 'ActiveDir@mail.activedir.org '
Subject: RE: [ActiveDir] Is it possible ? deny domain admins create new us
er permission
Maybe you could configure auditing to see who is creating user accounts or
"convert" all domain admins into normal users ;-)
Preventing what you want is not po
Maybe you could configure auditing to see who is creating user accounts or
"convert" all domain admins into normal users ;-)
Preventing what you want is not possible as domain admins in a forest/domain
have the ability to do everything they want
Jorge
_
From: [EMAIL PROTECTED]
[mailto:[EM
Aren't you skipping ahead a little? What about that new Active Directory
thing that everyone is talking about?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick
Sent: Tuesday, February 22, 2005 3:54 PM
To: ActiveDir@mail.activedir.org
Subj
