enterprise admin and domain admin

[Guest BuckySteven]

Hi experts:

 

It is easy for a domain admin add his domain admin account into the

enterprise group. Isn't this a big security issue? A domain admin may take

control of the whole forest...

 

How can I prevent this to happen?

[Guest net_admin]

RE: enterprise admin and domain admin

 

I would try reACLing EA group, but test it in a dogfood environtment before.

 

--

NetAdmin <São Paulo, BR>

"Das ist nicht mein biere... arschloch."