Administrators Cannot Be Restricted in Windows 2000

• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Datacenter Server

SUMMARY

Windows 2000 now offers the ability to permit specific users or groups granular (very specific) administrative duties such as just resetting passwords, and so on in the domain. While this permits users to have new levels of administrative access, these users are not full administrators.

MORE INFORMATION

Through the use of Organizational Units (OU), policies, and security permissions, Windows 2000 permits administrators to grant others limited administrative powers to specific areas of the directory. However, if a user is a member of the administrators group, there is not a way to limit that users access. Administrators can always take ownership and delegate OU administration to others, as well as manage various other objects, such as users, groups, and OU's.

Additional query words:

Keywords : kbtool
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbinfo