RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread Depp, Dennis M.
What about adding them to each domain admins group for each domain? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, MarkSent: Tuesday, April 13, 2004 4:05 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] enterprise-wide accounts We’d like to eventually trim down the

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread Cary, Mark
Could you use a Universal Group? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 13, 2004 3:16 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] enterprise-wide accounts What about adding them to each domain admins group for each domain

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread Grillenmeier, Guido
e can either be the Enterprise Admins group or any other UG you assign for the task.   /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Depp, Dennis M.Sent: Dienstag, 13. April 2004 22:16To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts What about adding

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread Mike Celone
Behalf Of Grillenmeier, GuidoSent: Tuesday, April 13, 2004 5:47 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts domain admins is a global group and as such you can't add users from other domains to it. While other global groups can be converted to universal group

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread Matjaž Ladava
: Tuesday, April 13, 2004 10:16 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts What about adding them to each domain admins group for each domain? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, MarkSent: Tuesday, April 13, 2004 4

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread Grillenmeier, Guido
OTECTED] On Behalf Of Mike CeloneSent: Mittwoch, 14. April 2004 00:07To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts Alternatively you can do what we do here.  We have a startup script that runs from a GPO that adds a group to the local administrators group everytime the

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread joe
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, GuidoSent: Tuesday, April 13, 2004 6:23 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts > won't Restricted groups remove any groups that are in the administrators group > now except for t

RE: [ActiveDir] enterprise-wide accounts

2004-04-13 Thread joe
You can not add (haven't tried to hack this, probably is hard coded functionality) foreign users to the domain admin group of a domain, they must exist in the same domain - domain admins is a global group, standard rules apply. The best would be administrators group membership which, unlike

RE: [ActiveDir] enterprise-wide accounts

2004-04-14 Thread Celone, Mike
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, GuidoSent: Tuesday, April 13, 2004 6:23 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide accounts > won't Restricted groups remove any groups that are in the administrators group > now except for t

RE: [ActiveDir] enterprise-wide accounts

2004-04-21 Thread Grillenmeier, Guido
y machine in that OU. At the same time, the other members of the Adminstrators group remain in this group as well.   /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, MarkSent: Mittwoch, 21. April 2004 16:55To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-

RE: [ActiveDir] enterprise-wide accounts

2004-04-21 Thread Creamer, Mark
OK, thanks Guido. That helps a lot. Back to the lab!   -Original Message- From: Grillenmeier, Guido [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 21, 2004 2:50 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] enterprise-wide accounts   you can only change the groups