What about adding them to each domain admins group for each
domain?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Creamer,
MarkSent: Tuesday, April 13, 2004 4:05 PMTo:
[EMAIL PROTECTED]Subject: [ActiveDir] enterprise-wide
accounts
We’d
like to eventually trim down the
Could you use a Universal Group?
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, April 13, 2004 3:16 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] enterprise-wide accounts
What about adding them to each domain admins group for each domain
e can either be
the Enterprise Admins group or any other UG you assign for the
task.
/Guido
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Depp, Dennis
M.Sent: Dienstag, 13. April 2004 22:16To:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
What about adding
Behalf Of Grillenmeier,
GuidoSent: Tuesday, April 13, 2004 5:47 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
domain admins is a global group and as such you can't add
users from other domains to it. While other global groups can be converted to
universal group
: Tuesday, April 13, 2004 10:16 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
What about adding them to each domain admins group for each
domain?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Creamer,
MarkSent: Tuesday, April 13, 2004 4
OTECTED] On Behalf Of Mike
CeloneSent: Mittwoch, 14. April 2004 00:07To:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
Alternatively you can do what we do here. We have a
startup script that runs from a GPO that adds a group to the local
administrators group everytime the
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier,
GuidoSent: Tuesday, April 13, 2004 6:23 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
> won't Restricted groups remove any groups that are in
the administrators group
> now except for t
You can not add (haven't tried to hack this, probably
is hard coded functionality) foreign users to the domain admin
group of a domain, they must exist in the same domain - domain admins
is a global group, standard rules apply. The best would be administrators group
membership which, unlike
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier,
GuidoSent: Tuesday, April 13, 2004 6:23 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-wide
accounts
> won't Restricted groups remove any groups that are in
the administrators group
> now except for t
y machine in that OU. At the same time, the
other members of the Adminstrators group remain in this group as
well.
/Guido
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Creamer,
MarkSent: Mittwoch, 21. April 2004 16:55To:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] enterprise-
OK, thanks
Guido. That helps a lot. Back to the lab!
-Original Message-
From: Grillenmeier, Guido
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 21, 2004
2:50 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir]
enterprise-wide accounts
you can only change the
groups
11 matches
Mail list logo