active directory, windows, server
Which is the purpose of the AdminSDHolder object?
I will publish the answer in the next days.
my only question is why the heck did u add printer operators as a protected group?
Like many other groups, the idea of being protected is to prevent rights elevation.
Just imagine a group membership administrator adding himself as Print Operator.
Thanks for your comment.
Have a nice day!
well if you give the farm away you've given the farm away! If you have this group member admin doing things like this then what prevents them from altering more important groups, I'd hope acls on the important group objects and ou's, thus the group member admin could maintain his list of groups but not others!
The right options are 1 and 2, or 4.