Hey everyone,
So I’ve been trying to figure out if there is a way to prohibit domain admins from changing the password or account settings on individual accounts. I have a few dummy accounts I use to run services, network scanning to SMB and to protect various files.
I have a few domain admins that change student passwords and such. However, I sometimes worry that their careless clicking and or curiosity could lead them to disabling or changing one of these accounts.
So.. is there a way in windows 2k3 to do this? I haven’t had much luck with delegation but if that’s the only way then I’ll have to learn.
Thanks!
