Tom's Hardware > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > Display users, groups, etc Domain permissions

Display users, groups, etc Domain permissions

Forum Windows 2000/NT : Windows 2000/NT General Discussion - Display users, groups, etc Domain permissions

Tom's Hardware: Over 1.4 million members in 6 different countries available to answer all your high-tech questions. Sign up now! Its free!
Word :    Username :           
 

Archived from groups: microsoft.public.win2000.active_directory (More info?)

 

Hi, for our IT auditors we need to show them what user permissions everyone
has got within AD 2003. Especially the Admins. We just showed them
(auditors) the built in Admin groups, but they are not happy with this and
asked for a report on all users and what control they have. It and admin
accidently adds a user to a admin group how would we know?

I just hope you guys know of a solution we can put in place from now on.

Thanks

S

Sponsored Links
Register or log in to remove.

Archived from groups: microsoft.public.win2000.active_directory (More info?)

 

SW wrote:
> Hi, for our IT auditors we need to show them what user permissions everyone
> has got within AD 2003. Especially the Admins. We just showed them
> (auditors) the built in Admin groups, but they are not happy with this and
> asked for a report on all users and what control they have. It and admin
> accidently adds a user to a admin group how would we know?
>
> I just hope you guys know of a solution we can put in place from now on.

Yes, You can use Restricted groups GPO setting to force membership of
administrative groups. If one add a new user to such group it will be
removed at next GPO refresh.

--
Tomasz Onyszko
http://www.w2k.pl

Reply to Anonymous
Tom's Hardware > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > Display users, groups, etc Domain permissions
Go to:

There are 1183 identified and unidentified users. To see the list of identified users, Click here.

Please mind

You are about to answer a thread that has been inactive for more than 6 months.
If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.

Add a reply Cancel
Sponsored links
  • Ask the community now
  • Publish
Ad
They won a badge
Join us in greeting them