Enterprise Admin Issue

[Chris]

Archived from groups: microsoft.public.win2000.security (More info?)

When installing SMS we noticed that on certain machines
the Enterprise Admin did not have admin rights to the
workstations. We would go and manually add the enterprise
admin to the admin group of the workstation, but on
others we did not have to do this.

Anyone know why some workstations had to have the
enterprise admin manually entered as an admin???

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

By default the domain admins global group is added to the local administrators group
of W2K domain computers and not the enterprise admins group. Possibly somebody added
the enterprise admins to those computers ? I would not recommend that enterprise
administrators be used to manage domain members anyhow as that is the most powerful
group in the domain and should be used only when needed - not for everyday activities
which could open users in that group to risk of password capture on non secured
workstations/servers. -- Steve


"Chris" <cmills@computerhorizons.com> wrote in message
news:2cd8f01c46a78$00dc3db0$a601280a@phx.gbl...
> When installing SMS we noticed that on certain machines
> the Enterprise Admin did not have admin rights to the
> workstations. We would go and manually add the enterprise
> admin to the admin group of the workstation, but on
> others we did not have to do this.
>
> Anyone know why some workstations had to have the
> enterprise admin manually entered as an admin???
>
>