|
|
|
In order to add users to an AD group, you need to have modify rights over the group. You don't need to have anything but view rights over the user.
This means that anyone with rights over a group can add any user they like into this group. Does anyone know of a way to restrict the users who can be added to that group to, for example, users within a particular OU?
|
|
|
|
|
If the user has been trusted with access to active directory and the group in question then they should be trusted as to which users they add. If they are untrust worthy why let them near it? This is why we have admin's :P
|
|
|
|
|
It's not a question of trustworthyness, it's a question of responsibility. Each line of business has its own OU structure and its own support team. Groups are used for permissioning resources. The support team for (for example) Sales should not be able to provide resources to someone in Marketing by adding them into a group that is in the Sales OU.
I want to be able to ensure that only a user's own support team can add them into groups that give them access to resources. Unfortunately I don't think it's possible.
|
|
|
|
|
Hmmm yeah I can see how in the situation it would be handy. You could possibly do it by creating separate domains and setting up the right trust hierarchies but that's probably a bit overkill 
|
|
|
|
|
Hi All,
I have 4 partitions in my hard disc c: , d: , f:, g:
i want to change the drive letter g: to e: ... i tried but i got a message that "changing drive letter may lead to data loss" .. is it so..
please help me changing the drive letter......
Thanks,
Vimal
If U Get Errors U Will Learn
If U Don't Get Errors U Have Learnt
|
|
|
|
|
You might get problems if you have any installed software on G: (i.e. in a ProgramFiles folder), otherwise you should be ok, but you should consider backing up the drive first.
|
|
|
|
|
So... If i change the Drive letter the data in that drive will be lost..... ?
If U Get Errors U Will Learn
If U Don't Get Errors U Have Learnt
|
|
|
|
|
You won't lose data (files, folders etc), but if you have applications installed on that drive, they probably won't run. This is because the installation will have written entries to the registry that contain paths to the executables in those applications, and if you change the drive letters then the paths will no longer be valid.
|
|
|
|
|
You could try to use Powerquest's Drive Mapper. It's for these situations when you change drive letters and want to preserve installed applications.
|
|
|
|
|
Don't tell me, tell the OP!
|
|
|
|
|
Hello,
We have two servers.
One server is running the web application (IIS 6). Let's call it server 1.
The second server is running some services and web services dealing with major data manipulation.(server 2)
Upon completion of a certain process on server 2, a file needs to be copied to server 1.the copy is done via a web service call. this opertaion fails due to a security problem (login failed error msg is in the event log).
Both servers can "see" each other (ping, map network drive and server 2 is also defined with admin rights on server 1). copying the file "manually" is ok.
The target directory on server 1 is under inetpub\wwwroot\xxxxxxx.
The code is in C#, .Net framework 2, and the File.Copy method is used.
10x for any help might be provided.
Elrom
|
|
|
|
|
It is likely that the process that is running the copy on Server 2 does not have access rights (is it running as local system?) to the target folder on Server 1 - when you copy the file manually, it is using your access rights so the copy succeeds.
I'm not sure what you mean when you say "Server 2 is defined with admin rights on Server 1". If the process is running as a local account, this cannot be given rights on a different server as the accounts are restricted to the local machine.
|
|
|
|
|
hello to ALL,
i am using windows server 2003 system in that i have one folder named "TestParent" i share that folder and give some share permission. when i clicked on Permission button there was a default "Everyone" group added already,
i removed that group, and add my own active directory group,
now same thing i done at "security" tab (when we select folder and right click "properties" and "security" TAB)
and i have also checked the "Allow inheritable permission from parent to propagate to this object and child objects"
check box.
when i create a folder named "Child1" in the "TestParent" folder the security permission has been inherit but when i share the folder the access permission has not been inherited .....WHY????
can i do that ....??
please help.
thankx in advance.
regards,
koolprasad2003
Be a good listener...Because Opprtunity knoughts softly...N-Joy
|
|
|
|
|
koolprasad2003 wrote: "Allow inheritable permission from parent to propagate to this object and child objects"
Only applies toe NTFS permissions. It doesn't have any effect on Share permissions. Besides, there is no such thing as a Parent/Child relationship between Shares.
|
|
|
|
|
Hello All..
Am trying to configure my e mail account on outlook 2003, but am facing a problem: cannot connect to outgoing mail server, while connection to ingoing mail server is OK, (i can receive but can't send), bare in mind that both servers are same, and i didnt mistaken in spelling.
More clarification: I tried to configure it on another PC, on the same network, things gone fine, i could receive and send, also my team mate can.
It is only on my PC, I tried alot but no result i checked the spelling, confirmed the password, everything, so i suspect that may be there is some configuration that i must do before?
Plz help, Urgent...
Best Regards.
Scorpion.
|
|
|
|
|
Just a shot in the dark, but do you have the Windows firewall enabled? You may be blocking traffic on the SMTP port (25 IIRC). Also, some servers require authentication for SMTP; this is not enabled by default.
"A Journey of a Thousand Rest Stops Begins with a Single Movement"
|
|
|
|
|
Thanks, but, ...
The firewall is disabled. also the server doesnt need authntication, since the same account can be configured on outlook on another machine, the problem only appear on my machine, it is weared...
So any thing else in mind ???
Regards.
Scorpion
|
|
|
|
|
If there is one account with no password XP will log onto that by default but I have a PC with two accounts with passwords.
Is it possible to set up the PC to automatically log onto a specified account with a password?
Ta.
Elaine ![Rose | [Rose]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/rose.gif)
|
|
|
|
|
|
Thanks, just what I wanted!
|
|
|
|
|
You can also do it directly from windows, by doing start run, then typing "control userpasswords2". Then select the account to auto login to and then uncheck the users must enter a password box.
Don't forget that if you want to abort an auto login, hold down shift before the login dialog shows, and release it when it asks for the credentials.
//Johannes
|
|
|
|
|
Hi guys,
Hope you're all well,
I have a quirk with Terminal Services/Remote Desktop in that when I set up a program to run at logon on a User's Environment tab, the very first screen that is displayed is always maximised and thrown to the top-lefthand corner. Thats regardless of what .exe you set it to, and regardless of what resolution you specify in the Remote Desktop client.
Has anybody seen/heard of this before, and if so find a way to correct it?
Many thanks for any help in advance...
Gruninho
|
|
|
|
|
Hi, I have a problem with one client in my network. My client computer is a laptop and affect with viruse W32.SillyFDC[^]. I disconnect my client from the network and scan it in safe mode with Symantec client corporate edition 10.0. Its catch 8 virus with a full scan.
After that I restart the computer as normal but the auto-protect of symantec still catch this virus with the other trojan virus. But when I try to scan with the full scan, it doesn't catch any virus. But the dialog box of auto-protect still catch this virus. I try to find the key in Registry that load the virus but i could not find the key of the virus. Now I do not know how to clean this virus from the client.
Please let me know any other method that I could solve this problem.
Thank in advance!!!
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
