How do I setup a group so that users can access active directory but not modify anything?

-

i want give remote access server can view such ad, exchange settings etc don't want allow them change of settings. have been looking around cannot figure out. assumed read-only domain controller group had not work. asks admin password when try , launch ad. appreciated!

as said, read access given default. you'd need wizard if plan extend permissions.
the default "read" permissions for domain users might considered security issue can see here:
http://www.windowsecurity.com/articles/active-directory-information-exposed-users.html
you should not asked password when being logged onto computer member of domain
while using user member of domain. have verfied that?

is possible modified default ad permissions , have removed acls?

and please let me know operating systems use (for ad servers and client mmc started).

patrick


Windows Server  >  Group Policy



Comments

Post a Comment

Popular posts from this blog

Global Catalog ?

-
greetings! we have set 2008 r2 x64 server in our company. -we promote server dc -we add ad roles -we have transfered fsmo roles on server -we have add dns role on server question: server going our primary dc, cause old 1 eventualy going shut down completely. must still export , import dhcp new server. problem/question global catalog. have 1 forest, 2 domains. in primary domain 3 dc's (this new server 1 of them), , in child domain have 2 dc's. -is wrong if new server holds global catalog? read somewhere fsmo roles , global catalog together, not recommended? -would wrong if every dc in our company global catalog? with best regards, bostjan bostjanc you have 2 domains. need 1 schema master , 1 domain naming master in forest. recommended these roles reside on dc's in root domain, not required. need 1 pdc emulator, rid master, , infrastructure master each domain. in case, in both of your domains, either dc's should gc's, or infrastructure ma...
Read more

mailing list

-
how create mailing list see article "creating mail merge data source” at: http://www.word.mvps.org/faqs/mailmerge/createadatasource.htm  -- hope helps. doug robbins - word mvp, dkr[atsymbol]mvps[dot]org posted via community bridge "mailing list" wrote in message news:25d6abcb-1717-4ec8-9587-860696c38f53@communitybridge.codeplex.com... how create mailing list doug robbins - word mvp dkr[atsymbol]mvps[dot]org Microsoft Office  >  Word IT Pro Discussions
Read more

Global Catalog

-
why recommended microsoft have global catalog in domain controller? why message import infrastructure master role in case not install global catalog in secondary dc? you can read here. https://technet.microsoft.com/en-us/library/cc737269(v=ws.10).aspx  in single-domain forest, configure domain controllers global catalog servers. because every domain controller stores domain directory partition in forest, configuring each domain controller global catalog server not require additional disk space usage, cpu usage, or replication traffic. in single-domain forest, domain controllers act "virtual global catalog servers" in can respond authentication or service request. special condition single-domain forests design (authentication requests not require contacting global catalog server, when there multiple domains , user can member of universal group exists in different domain). however, domain controllers designated global catalog servers can respond global catalog...
Read more