full-disclosure - Re: need help in managing administrators

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <BAY108-W657F6E35C43F468FCCBD7D66E0@phx.gbl>
Date: Wed, 5 Dec 2007 09:21:24 +0000
From: happy nino <nadtec@...mail.com>
To: "Joel R. Helgeson" <joel@...geson.com>, <bugtraq@...urityfocus.com>,
	<full-disclosure@...ts.grok.org.uk>
Subject: Re: need help in managing administrators

to all who replied to my request, i thank you a lot , you advises where really helpful, i thank you very much

From: joel@...geson.comTo: nadtec@...mail.com; bugtraq@...urityfocus.com; full-disclosure@...ts.grok.org.ukSubject: RE: [Full-disclosure] need help in managing administratorsDate: Sun, 2 Dec 2007 21:19:10 -0600

Launch “Active Directory Users & Computers”
Listed you have the AD containers used to hold all your objects, select a tree, right-click the container, click properties. There is a tab called “Delegate Control” where you can delegate management of the objects located in that container to whatever groups or individuals you want.  It is best to create a user group, then delegate the control to the group rather than the user.
This is where it is important that you have your AD containers set up properly…

Hope that helps provide some direction…

Joel Helgeson

From: full-disclosure-bounces@...ts.grok.org.uk [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of happy ninoSent: Sunday, December 02, 2007 3:42 AMTo: bugtraq@...urityfocus.com; full-disclosure@...ts.grok.org.ukSubject: [Full-disclosure] need help in managing administrators

Hi All,i've a problem in my organization that we have several domain admins, we are in the process of removing most of them but i need to have a person only authorized to installnew software to users' computers but without having access to other parts of the users machines, is this possible ?..can i delegate a function like this only to certain users with outbeing domain admins?Appreciate your great helpthanks alot regards,Nad 

Get closer to the jungle. I'm a Celebrity Get Me Out Of Here!
_________________________________________________________________
Telly addicts unite!
http://www.searchgamesbox.com/tvtown.shtml
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/