Server 2003 and AD
I have a new NetAdmin Assistant. I need to controll her group memberships she has assigned herself and then restrict the ability to re assigne those. Under this new admins account properties, if I remove the Shema and enterprise admin group memberships ....then under account security, I remove the checkbox for writing group membership will that do what I want ? ?
I do want her to be able to change users group memberships and such...but not her own...the new admn hasnt been trained and I would like to keep her out of areas that could harm