General discussion

Locked

Account Operators

By sldavis ·
I created an account in Active Directory and made it a member of the Account Operators group. I noticed that I was able to reset a password on an account that was a member of the Administrators group. According to manuals that I have read, this should have been restricted. Is there a way to prevent this from happening?

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Account Operators

by d.walker5 In reply to Account Operators

NTFS permissions are comulative, your user account must have Administrator permissions. To see the Access Control List us the command line ShowAcls located in the Windows 2000 esource Kit.

Syntax examples:

Drive:\Program Files\Resource Kit\ BUILTIN\User
BUILTIN\Power Users
BUILTIN\Administrators
CREATOR OWNER
NT AUTHORITY\TERMINAL SERVER USER

Collapse -

Account Operators

by sldavis In reply to Account Operators

Poster rated this answer

Back to Networks Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums