Too Many Administrators

hi all,

lost. domain has become on crowded administrators.
can't find right , left when start memeber in group, , hierarchy more scarier. manager, there forces here tend things own ways.

want start , make new order, , looking walkthroughs. has rebuilt groups ever?
what's best approach?
don't want recreate users, move around groups, , alter permissions according needs.

there management tool can me that?

start with, going put myself in enterprise admins group, , part of domain admins , admins.
create group server (xadmins, ccadmins), , admins part of new group, , members need special rights server, in group.
assign these rights according network shares.

correct?

please advise.

hi,

before start "cleaning up" ad, suggest putting policies in place (you may have work legal, hr , other concerned departments on this). way, can have strong justification in case of existing administrators come asking why rights got revoked. similarly, can define process on how administrative privileges can granted/revoked.

you can refer section "establishing best practices use of administrative accounts , groups" in following technet document other relevant bes-practice tips:

securing active directory administrative groups , accounts
http://technet.microsoft.com/en-us/library/cc700835.aspx#xsltsection127121120120

regards,

salvador manaois iii
mcitp | enterprise & server administrator
mcse mcsa mcts(x5) ciwa c|eh
my blog: bytes , badz 
my shots: view my photostream

Windows Server  >  Management