Guest BuckySteven Posted August 30, 2007 Posted August 30, 2007 Hi experts: It is easy for a domain admin add his domain admin account into the enterprise group. Isn't this a big security issue? A domain admin may take control of the whole forest... How can I prevent this to happen?
Guest net_admin Posted August 30, 2007 Posted August 30, 2007 RE: enterprise admin and domain admin I would try reACLing EA group, but test it in a dogfood environtment before. -- NetAdmin <São Paulo, BR> "Das ist nicht mein biere... arschloch."
Recommended Posts