[gptalk] Re: Server Operator BuiltinGroup

  • From: "Bobby T" <bob@xxxxxxxxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 12 Oct 2006 01:46:16 -0500

So, if I'm understanding you, you're trying to give the User Management
group ability to manage "SO" users, with out giving them all the SO rights?
Or am I still missing what you're trying to solve?


From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Sirini k
Sent: Wednesday, October 11, 2006 7:46 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Server Operator BuiltinGroup

Thanks Bob,
But that will not solve my problem, it only controls the membership of the
SO group ,let me explain my requirement:
Our's is huge user base account where all user management is done thru  user
management  group and these members are less privileged admins than SO, they
can't reset the member accounts of server operators group due to Server
operators Dacl is Protected by PDCE and i don't want to give the user
management group a higher privileges than the present one.
Secondly we are don't want to use any butilin groups, we wanted to fine tune
the Roles for admin tasks and grant proper permission's & previlalges to
these roles.

Bobby T <bob@xxxxxxxxxxxxxxxxxx> wrote:

Perhaps another way to do this is to create a security group and then make
it Resticted to the Server Operators via GPO. That is, if you need to
control who's in that group, you can do it with a security group, then place
permissions on the security group to control who is place in it.

Not sure if that will solve your problem..


From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Sirini k
Sent: Monday, October 09, 2006 4:45 PM
To: gptalk@xxxxxxxxxxxxx
Cc: srini_08872@xxxxxxxxx
Subject: [gptalk] Server Operator BuiltinGroup


I have a very basic knowledge on GPO and I'm reaching to this community to
find an answer to my question /doubt.

I'm need of a security group which has similar permissions and privileges
granted to Built-in Server operator group in Windows 2003 AD.

Basically I don't want to use the built-in group but rather create a new
group and grant this group all permissions and privileges granted to
built-in Server operators group can this is achievable thru GPO, if so can
some one guide me plz if not what are reasons it can't be done.

Highly appreciate any inputs on this topic,
Many thanks in advance


Want to be your own boss? Learn how on Yahoo!

Small Business. 


Yahoo! Messenger with Voice. Make
t=39663/*http://voice.yahoo.com> PC-to-Phone Calls to the US (and 30+
countries) for 2¢/min or less.

Other related posts: