Active Directory User Groups

Archived from groups: microsoft.public.win2000.security (More info?)

In Active Directory Users and Computers examine the membership of these
groups - administrators, domain admins, and enterprise admins. Remove
users/groups that should not be members including the Faculty Group. You can
also use Group Policy Restricted Groups to enforce and maintain membership
of domain and local groups on domain computers. --- Steve

http://msdn.microsoft.com/library/ [...] gp/611.asp
--- Restricted Groups.

"mwcanton" <mwcanton@discussions.microsoft.com> wrote in message
news:EB77AA02-77A7-4A5B-835F-9B9C7CCFDD58@microsoft.com...
> We have a Faculy Group that contains all our teacher user accounts. It was
> brought to my attension that they all have Domain Admin rights. Is there a
> tool that I can use to strip that entire group of Domain Admin rights.
> Windows Server 2003.
> Thanks

Archived from groups: microsoft.public.win2000.security (More info?)

Glad to help. In case you check back you may find the link below helpful on
security basics. --- Steve

http://www.microsoft.com/smallbusi [...] urity.mspx ---
Microsoft small business security guidance.

"mwcanton" <mwcanton@discussions.microsoft.com> wrote in message
news:646747B2-477E-4CA7-8892-B62AAFB35657@microsoft.com...
> Steve,
>
> Thanks very much .........
>
> "Steven L Umbach" wrote:
>
>> In Active Directory Users and Computers examine the membership of these
>> groups - administrators, domain admins, and enterprise admins. Remove
>> users/groups that should not be members including the Faculty Group. You
>> can
>> also use Group Policy Restricted Groups to enforce and maintain
>> membership
>> of domain and local groups on domain computers. --- Steve
>>
>> http://msdn.microsoft.com/library/ [...] gp/611.asp
>> --- Restricted Groups.
>>
>> "mwcanton" <mwcanton@discussions.microsoft.com> wrote in message
>> news:EB77AA02-77A7-4A5B-835F-9B9C7CCFDD58@microsoft.com...
>> > We have a Faculy Group that contains all our teacher user accounts. It
>> > was
>> > brought to my attension that they all have Domain Admin rights. Is
>> > there a
>> > tool that I can use to strip that entire group of Domain Admin rights.
>> > Windows Server 2003.
>> > Thanks
>>
>>
>>