Thorough list of rigts for a Domain Admin versus Adminstrator vs etc. 2

[TopRung]

Can someone show me to the light?

I need a list of the default rights and restrictions for groups. In particular,

Domain Admin
Adminstrator
Domain User


I need specifics on what they can do local on a server (if they have local logins), what they can do from machines on the domain, etc.


Thank you.

 

[bofhrevenge2]

Here is some MS information on XP local groups and rights.

http://www.microsoft.com/resources/.../en-us/windows_security_default_settings.mspx

and this is a rundown of the local groups in 2003 server.

http://www.microsoft.com/resources/.../standard/proddocs/en-us/lsm_local_groups.asp

Domain admins is a domain group that is a member of the local administrators group on all machines that are connected to the domain so by default they have the same permissions as the local administrators group. The same rules apply for the domain users group.

 

[GlenJohnson]

Here is a link for the policies of Windows 2000, the forum of which we are currently in, so I'm hoping this is the operating system you're talking about. Hope it helps.

http://www.comptechdoc.org/os/windows/win2k/win2kpolicies.html

Glen A. Johnson
If you're from Northern Illinois/Southern Wisconsin feel free to join the Tek-Tips in Chicago, Illinois Forum.
[red]Don't forget to shop @ theTek-Tips Store[/red]
TTinChicago

 

[bofhrevenge2]

Ooops well pointed out Glen i thought i was reading a thread in the 2003 forum.