Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations Chris Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

AD Administration

Status
Not open for further replies.
BHX90

BHX90

IS-IT--Management
Dec 2, 2006
29
GB
Hi,

I have been requested to ensure that the junior members of the IT department are unable to access the AD objects, data and email of the senior management.

I'm planning on using the follow:

Remove junior guys from Domain Admins group
OU Delegation to protect the AD objects (separate OU for managemnt)
Remove the access rights on the senior management data shares
Use the message store secuity on Exchange
Use restricted groups so the junior guys can still install apps to the workstations etc.

Have I missed anything? Has anyone got any better suggestions or links whitepapers etc

Thanks
 
Status
Not open for further replies.

Similar threads

rzammit82
  • Locked
  • Question
Windows Server 2016 - DNS/AD problem
Replies
1
Views
624
suncit
suncit
DrB0b
  • Locked
  • Question
Hybrid on prem AD with Azure AD
Replies
2
Views
251
DrB0b
DrB0b
DTGMI
  • Locked
  • Question
WIN 10 Pro PC & Adding back to our Network
Replies
0
Views
412
DTGMI
DTGMI
mangentle
  • Locked
  • Question
What are the key advantages of using Microsoft Windows Servers for businesses?
Replies
1
Views
863
gbaughma
gbaughma
on3mansh0w
  • Locked
  • Question
[HELP] AD GPO not applied unexpectedly
Replies
0
Views
200
on3mansh0w
on3mansh0w

Part and Inventory Search

Sponsor

Back
Top