Prohibit password change

By ZoSoSwiM ·
Hey everyone,

So I've been trying to figure out if there is a way to prohibit domain admins from changing the password or account settings on individual accounts. I have a few dummy accounts I use to run services, network scanning to SMB and to protect various files.

I have a few domain admins that change student passwords and such. However, I sometimes worry that their careless clicking and or curiosity could lead them to disabling or changing one of these accounts.

So.. is there a way in windows 2k3 to do this? I haven't had much luck with delegation but if that's the only way then I'll have to learn.


This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

Depends on who you are here I suppose

by OH Smeg Moderator In reply to Prohibit password change

If you are a general run of the mill end user no there is not a way to prevent this from happening.

If you are listed as an Administrator or higher it would be possible to isolate certain accounts from General Participation by changing their Permissions and so on. However if you are not one of the System Admins the simple fact of doing something like this will arouse suspicion and result in investigation to see what is happening here and who is responsible.

When everything is said and Done the Ultimate Authority of any Network is the network Admin who has to know what is happening on their charges.


Related Discussions

Related Forums