[windows2000] Re: Account operator privileges bet
- From: "Chris Berry" <compjma@xxxxxxxxxxx>
- To: windows2000@xxxxxxxxxxxxx
- Date: Mon, 05 May 2003 16:29:47 -0700
>From: "Costanzo, Ray" <rcostanzo@xxxxxxxxxxx>
>If anyone could settle a bet here...
>
>Domain user JOSH has account operator privileges in the domain. JOSH is
>permitted to reset passwords for ordinary users and other users who do
>not have higher privileges in the domain (i.e. domain admin). Now, TRUE
>OR FALSE. JOSH does not have permissions to reset a DOMAIN user account
>(ordinary user) if that user has LOCAL ADMIN rights on his WINDOWS NT
>workstation.
False, having local admin rights doesn't change his account operator
privilege. Josh does have permission to reset DOMAIN accounts regardless of
whether those accounts are members of a LOCAL group or not.
Chris Berry
compjma@xxxxxxxxxxx
Systems Administrator
JM Associates
"This email is ROT26 encrypted, by reading it you are in violation of the
DMCA, and should turn yourself in to the authorities immediately."
_________________________________________________________________
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.
http://join.msn.com/?page=features/virus
==================================
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/win2000list.cfm
Other related posts:
