Structuring accounts for logging into servers (advice)


hi all,

i have domain computers , users (standard setup). wondering, how structure accounts logging servers?

for example, create group in ad users , call group "local admins", , add group servers via gp.

or use managed attribute on ad?

what's best approach?

hi,

based on research, “manage by” tab informational, still need delegate control user/group has appropriate access permissions on object.

here is related link below suggest refer to:

"managed by"

http://social.technet.microsoft.com/forums/windowsserver/en-us/287526e4-c28c-4967-8a15-02b4d0f00807/managed-by?forum=winserverds

best regards,

amy wang




Windows Server  >  Directory Services



Comments

Popular posts from this blog

Motherboard replacement

Cannot create Full Text Search catalog after upgrading to V12 - Database is not fully started up or it is not in an ONLINE state

Remote Desktop App - Error 0x207 or 0x607