Segregating Win2k3 ID

shahrun · 05-14-2008, 02:44 AM

Hi all,

As part of compliance, we need to segregate a win2k3 IDs into 2 group with the following roles:

Security Group
-Able to create/delete win2k3 user id
-The rest of the privileges is same as "User" group privilege

Server Support Group
- Can not create/delete win2k3 user id
- The rest of the privileges is same as "Administrator" group privileges.

Maybe some one can help me to find how this can be implemented wheter to set on the Local Security Policy or in the registery.

XtabbedoutX · 05-14-2008, 05:16 PM

You mange this with Permissions. In the "Member Of" tab on the properties you can add/delete group permissions from there. Read up on what all eash group has the ability to do but that is how to achieve it.

I believe it explains itself on the main section of the active directory if I am not mis-taken.

shahrun · 05-14-2008, 06:31 PM

May I know where we can set/view/change the roles of "Adminstrator" / "Power User" / "User" group?. Is it in the Local Security Policy?

djaburg · 05-14-2008, 11:37 PM

Go to administrative tools in the control panel, then go to Active Directory Users and Groups and you'll be able to modify their properties in there.

05-14-2008, 02:44 AM	#1 (permalink)
shahrun Registered User Join Date: May 2008 Posts: 2 OS: XP	Segregating Win2k3 ID Hi all, As part of compliance, we need to segregate a win2k3 IDs into 2 group with the following roles: Security Group -Able to create/delete win2k3 user id -The rest of the privileges is same as "User" group privilege Server Support Group - Can not create/delete win2k3 user id - The rest of the privileges is same as "Administrator" group privileges. Maybe some one can help me to find how this can be implemented wheter to set on the Local Security Policy or in the registery.

05-14-2008, 05:16 PM	#2 (permalink)
XtabbedoutX Tech, Microsoft Support Join Date: Sep 2007 Location: Oklahoma City Posts: 861 OS: Server 2K3 R2, Server 2K, XP PRO, Mac OS X 10.4, Mac OS X 10.5, Ubuntu Linux 7.10, iPhone My System	Re: Segregating Win2k3 ID You mange this with Permissions. In the "Member Of" tab on the properties you can add/delete group permissions from there. Read up on what all eash group has the ability to do but that is how to achieve it. I believe it explains itself on the main section of the active directory if I am not mis-taken. __________________ HJT - 5 steps against malware. Post your HijackThis log there and not here ! Posting system specs

05-14-2008, 06:31 PM	#3 (permalink)
shahrun Registered User Join Date: May 2008 Posts: 2 OS: XP	Re: Segregating Win2k3 ID May I know where we can set/view/change the roles of "Adminstrator" / "Power User" / "User" group?. Is it in the Local Security Policy?

05-14-2008, 11:37 PM	#4 (permalink)
djaburg Registered User Join Date: May 2008 Posts: 261 OS: XP SP2	Re: Segregating Win2k3 ID Go to administrative tools in the control panel, then go to Active Directory Users and Groups and you'll be able to modify their properties in there.