Yes, it is true - he does have the authority to change another users password (whether or not they are local admin on their own box or not) -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Costanzo, Ray Sent: Monday, May 05, 2003 3:31 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Account operator privileges bet Wait, true? "TRUE OR FALSE: JOSH does NOT have permissions." Did you mean false? =3D20 Our bet is only $1.00. I'll send you 50=3DA2.=3D20 Ray at work=3D20 > -----Original Message----- > From: Sullivan, Glenn [mailto:GSullivan@xxxxxxxxxxxxxx]=3D20 > Sent: Monday, May 05, 2003 3:24 PM > To: 'windows2000@xxxxxxxxxxxxx' > Subject: [windows2000] Re: Account operator privileges bet =3D20 >=3D20 >=3D20 > True. >=3D20 > The domain knows nothing of his local group memberships. =3D20 > Local groups membership is applied by the local SAM, after=3D20 > the user has authenticated to the domain (in a domain environment). >=3D20 > Settling another argument? I'm going to have to ask for=3D20 > mediation fees pretty soon... >=3D20 > Glenn Sullivan, MCSE+I MCDBA > David Clark Company Inc. >=3D20 >=3D20 > -----Original Message----- > From: Costanzo, Ray [mailto:rcostanzo@xxxxxxxxxxx] > Sent: Monday, May 05, 2003 3:19 PM > To: windows2000@xxxxxxxxxxxxx > Subject: [windows2000] Account operator privileges bet >=3D20 >=3D20 >=3D20 > Hi list, >=3D20 > If anyone could settle a bet here... >=3D20 > Domain user JOSH has account operator privileges in the=3D20 > domain. JOSH is permitted to reset passwords for ordinary=3D20 > users and other users who do not have higher privileges in=3D20 > the domain (i.e. domain admin). Now, TRUE OR FALSE. JOSH=3D20 > does not have permissions to reset a DOMAIN user account=3D20 > (ordinary user) if that user has LOCAL ADMIN rights on his=3D20 > WINDOWS NT workstation. >=3D20 > Thanks, >=3D20 > Ray at work >=3D20 >=3D20 > ********************************************************************** > This email and any files transmitted with it are confidential=3D20 > and intended solely for the use of the individual or entity=3D20 > to whom they are addressed. If you have received this email=3D20 > in error please notify the system manager. >=3D20 > This footnote also confirms that this email message has been=3D20 > swept by MIMEsweeper for the presence of computer viruses. >=3D20 www.mimesweeper.com ********************************************************************** =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D= 3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D= 3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ********************************************************************** This email and any files transmitted with it are confidential and = intended solely for the use of the individual or entity to whom they are = addressed. If you have received this email in error please notify the system = manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com ********************************************************************** =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ================================== To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm