Perils of administrative privileges?

Tags:
Administrative privileges
Permissions
Windows Security
If local user in the domain is granted in administrative privileges, does that mean that the user will be able to access all domain in the server?

Answer Wiki

Thanks. We'll let you know when a new response is added.

*** Improved by Wrobinson on 03/16/2008 ***

This question is relatively unclear but I think I understand that it is that you are asking. The answer depends on exactly what you grante administrative rights to — a local workstation or server, or add a user to to a special group such as domain admins, domain administrators, etc. Making a domain user a member of the local administrators group on a particular computer or set of computers does not translate into having domain privileges.

*** End Update ***

If a local user is granted administrative rights to that server they can do anything they wish to that server only. The rights do not traverse back up to the domain, nor do they transfer to other servers in the domain.

Discuss This Question: 1  Reply

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • JonHassell
    If you are granting a domain user (rather than a local user) Enterprise Administrator privileges, then that will almost always mean that user will then be able to access any object in any server or domain in the organization's forest.
    1,095 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following