>From: "Costanzo, Ray" <rcostanzo@xxxxxxxxxxx> >If anyone could settle a bet here... > >Domain user JOSH has account operator privileges in the domain. JOSH is >permitted to reset passwords for ordinary users and other users who do >not have higher privileges in the domain (i.e. domain admin). Now, TRUE >OR FALSE. JOSH does not have permissions to reset a DOMAIN user account >(ordinary user) if that user has LOCAL ADMIN rights on his WINDOWS NT >workstation. False, having local admin rights doesn't change his account operator privilege. Josh does have permission to reset DOMAIN accounts regardless of whether those accounts are members of a LOCAL group or not. Chris Berry compjma@xxxxxxxxxxx Systems Administrator JM Associates "This email is ROT26 encrypted, by reading it you are in violation of the DMCA, and should turn yourself in to the authorities immediately." _________________________________________________________________ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus ================================== To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm