Perils of administrative privileges?
If local user in the domain is granted in administrative privileges, does that mean that the user will be able to access all domain in the server?
Software/Hardware used:
Software/Hardware used:
ASKED:
March 14, 2008 4:02 PM
UPDATED:
March 31, 2008 3:21 PM
Answer Wiki:
*** Improved by Wrobinson on 03/16/2008 ***
This question is relatively unclear but I think I understand that it is that you are asking. The answer depends on exactly what you grante administrative rights to -- a local workstation or server, or add a user to to a special group such as domain admins, domain administrators, etc. Making a domain user a member of the local administrators group on a particular computer or set of computers does not translate into having domain privileges.
*** End Update ***
If a local user is granted administrative rights to that server they can do anything they wish to that server only. The rights do not traverse back up to the domain, nor do they transfer to other servers in the domain.
To see all answers submitted to the Answer Wiki: View Answer History.
If you are granting a domain user (rather than a local user) Enterprise Administrator privileges, then that will almost always mean that user will then be able to access any object in any server or domain in the organization’s forest.