active directory, windows, server Question of the Day - AdminSDHolder - Blog dedicado a Servicios de directorio y otros temas relacionados - Site Home - TechNet Blogs

Question of the Day - AdminSDHolder

Question of the Day - AdminSDHolder

  • Comments 4
  • Likes

Which is the purpose of the AdminSDHolder object?

  1. Ensures that the objects like groups and users, to which applies administratives roles (those assigned through task delegation), have no more than the necessary permissions over accounts and protected groups.
  2. Prevents rights elevation over accounts and protected groups.
  3. Maintains the integrity of the permissions applied when delegating a specific tasks.
  4. 1 and 2.
  5. There is no such object.

I will publish the answer in the next days.

Regards.

Marcelo.

Comments
  • my only question is why the heck did u add printer operators as a protected group?

  • Like many other groups, the idea of being protected is to prevent rights elevation.

    Just imagine a group membership administrator adding himself as Print Operator.

    Thanks for your comment.

    Have a nice day!

  • well if you give the farm away you've given the farm away!  If you have this group member admin doing things like this then what prevents them from altering more important groups, I'd hope acls on the important group objects and ou's, thus the group member admin could maintain his list of groups but not others!

  • The right options are 1 and 2, or 4.

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment