+ Post New Thread
Page 3 of 3 FirstFirst 123
Results 31 to 35 of 35
Learning Network Manager Thread, Domain Admin Access to Teaching Staff in Technical; For reference our Head of ICT only has teacher level access. Having said that a better line of discussion is ...
  1. #31

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,678
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    45
    For reference our Head of ICT only has teacher level access.

    Having said that a better line of discussion is "What exaclty are you trying to achieve?" As them to list the things that they need to be able to do and you will see if you can do it without giving them domain admin rights. i.e. through NTFS permissions and delegeated control as has been mentioned.

    I'd also point out that with domain admin rights they could go through everything if they wanted to. Even if you blocked their access they could take control and change the permissions.

  2. #32

    Join Date
    Apr 2010
    Posts
    2,054
    Thank Post
    83
    Thanked 188 Times in 155 Posts
    Rep Power
    84
    Why do they want admin rights? what have they told the head they are going to do with admin rights?

  3. #33
    oxide54's Avatar
    Join Date
    Mar 2009
    Posts
    798
    Thank Post
    51
    Thanked 55 Times in 54 Posts
    Rep Power
    23
    at our school, when i started all the "admin" staff (i mean the lovely ladies in the office) were domain admins, along with all of the it teachers and a few other random teachers.

    the admin staff were because apparently "that is the only way sims and fms will work"

    the it teachers were because they were it teachers.

    which was great because all staff were sharing a redirected start menu, and the it teachers quite often decided to uninstall software from computers, removing the shortcuts from everyones start menu.

    conficker infections were rife as all these domain admin accounts automatically had access to the C$ and admin$ shares on all the machines and could create schedulded tasks.

    new folders would randomly appear and existing ones disapear from the shared area.

    loads of other problems, I go on,

  4. #34

    Join Date
    Jun 2007
    Location
    London
    Posts
    894
    Thank Post
    64
    Thanked 171 Times in 140 Posts
    Rep Power
    55
    Quote Originally Posted by oxide54 View Post
    at our school, when i started all the "admin" staff (i mean the lovely ladies in the office) were domain admins, along with all of the it teachers and a few other random teachers.

    the admin staff were because apparently "that is the only way sims and fms will work"

    the it teachers were because they were it teachers.

    which was great because all staff were sharing a redirected start menu, and the it teachers quite often decided to uninstall software from computers, removing the shortcuts from everyones start menu.

    conficker infections were rife as all these domain admin accounts automatically had access to the C$ and admin$ shares on all the machines and could create schedulded tasks.

    new folders would randomly appear and existing ones disapear from the shared area.

    loads of other problems, I go on,
    Quod erat demonstrandum.

  5. #35
    oxide54's Avatar
    Join Date
    Mar 2009
    Posts
    798
    Thank Post
    51
    Thanked 55 Times in 54 Posts
    Rep Power
    23
    setup a child or seperate domain.

    and make her domain admin of that. Problem solved!

SHARE:
+ Post New Thread
Page 3 of 3 FirstFirst 123

Similar Threads

  1. Replies: 28
    Last Post: 15th August 2010, 09:47 AM
  2. Replies: 6
    Last Post: 26th May 2010, 06:17 PM
  3. Support Staff or Non-Teaching?
    By webman in forum General Chat
    Replies: 58
    Last Post: 20th April 2007, 12:06 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •