[gptalk] Re: Server Operator BuiltinGroup

  • From: Sirini k <srini_08872@xxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Mon, 16 Oct 2006 11:29:25 -0700 (PDT)

Yes Bob.

Robert Tannehill <rtannehill@xxxxxxx> wrote:      Srini,
  So, you want to be able to grant users ability to admin the SO group without 
giving them SO rights?
Bob
    
---------------------------------
  From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of srini_08872@xxxxxxxxx
Sent: Thursday, October 12, 2006 9:48 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Server Operator BuiltinGroup


  
  Bob,
   
  If i'm able to grant user mgmt group to administer "SO" group  members that 
solves my problem.
   
  thanks
  Srini

Bobby T <bob@xxxxxxxxxxxxxxxxxx> wrote:
  Srini
So, if I'm understanding you, you're trying to give the User Management
group ability to manage "SO" users, with out giving them all the SO rights?
Or am I still missing what you're trying to solve?
Bob

_____ 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Sirini k
Sent: Wednesday, October 11, 2006 7:46 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Server Operator BuiltinGroup


Thanks Bob,

But that will not solve my problem, it only controls the membership of the
SO group ,let me explain my requirement:

Our's is huge user base account where all user management is done thru user
management group and these members are less privileged admins than SO, they
can't reset the member accounts of server operators group due to Server
operators Dacl is Protected by PDCE and i don't want to give the user
management group a higher privileges than the present one.

Secondly we are don't want to use any butilin groups, we wanted to fine tune
the Roles for admin tasks and grant proper permission's & previlalges to
these roles.

Srini



Bobby T wrote:

Srini,
Perhaps another way to do this is to create a security group and then make
it Resticted to the Server Operators via GPO. That is, if you need to
control who's in that group, you can do it with a security group, then place
permissions on the security group to control who is place in it.

Not sure if that will solve your problem..
Bob

_____ 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Sirini k
Sent: Monday, October 09, 2006 4:45 PM
To: gptalk@xxxxxxxxxxxxx
Cc: srini_08872@xxxxxxxxx
Subject: [gptalk] Server Operator BuiltinGroup


Greetings,

I have a very basic knowledge on GPO and I'm reaching to this community to
find an answer to my question /doubt.

I'm need of a security group which has similar permissions and privileges
granted to Built-in Server operator group in Windows 2003 AD.

Basically I don't want to use the built-in group but rather create a new
group and grant this group all permissions and privileges granted to
built-in Server operators group can this is achievable thru GPO, if so can
some one guide me plz if not what are reasons it can't be done.

Highly appreciate any inputs on this topic,
Many thanks in advance
Srini



_____ 

Want to be your own boss? Learn how on Yahoo!

Small Business. 




_____ 

Yahoo! Messenger with Voice. Make
t=39663/*http://voice.yahoo.com> PC-to-Phone Calls to the US (and 30+
countries) for 2¢/min or less.

    
---------------------------------
  Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ 
countries) for 2¢/min or less. 

                                
---------------------------------
Get your own web address for just $1.99/1st yr. We'll help. Yahoo! Small 
Business.

Other related posts: