Ask the Expert

Correctly configure admin rights on Windows networks

I have a Windows 2003 domain controller with about 200 ordinary users. Among them, ten users should have some privileges, like network configure, printer configure, software install, etc. Those ten users should not have administrative privileges, but they do. How can I control each user's admin rights on my Windows network?
Without being able to directly observe your environment, my best guess is that in order to have those admin rights, those users were made members of a group that grants them administrative privileges such as the Domain Admins group or the local Administrators group. I would review the groups that each user is a member of (right click on the user and select the "Member Of" tab), and remove any memberships that are not necessary.

This was first published in August 2007

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: