Structuring accounts for logging into servers (advice)

Hi All,
I have a domain with computers and users (standard setup). What I am wondering, how do you structure accounts that are for logging into the servers?
For example, I could create a group in AD with users and call this group "Local Admins", and add this group to all servers via GP.
Or I could use the Managed By attribute on AD?
What's the best approach?

Hi,
Based on my research, the “Manage by” tab is only informational, we still need to delegate control to the user/group so that it has appropriate access permissions on the object.
Here is related link below I suggest you refer to:
"Managed By"
http://social.technet.microsoft.com/Forums/windowsserver/en-US/287526e4-c28c-4967-8a15-02b4d0f00807/managed-by?forum=winserverDS
Best Regards,
Amy Wang

Similar Messages

  • Is there a Virtual keyboard for logging into online accounts securely?

    Does OS X offer a Virtual keyboard for logging into online accounts safely and securely? (bank accounts and email accounts and other membership accounts)
    If not, does anyone know of such a program designed for OS X?
    Thank you.

    That worked. Thank you.
    System Prefs >
    International button >
    Input Menu Tab >
    Choose "Show Input Menu in Menu Bar" checkbox >
    Choose "Keyboard Viewer" checkbox >
    Close System Prefs >
    Chose "Show Keyboard Viewer" in Menu Bar of USA Flag

  • Is there any way to see if any other FaceTime id or iCloud account has logged into my personal iPhone and iPad

    Is there any way to see if any other FaceTime id or iCloud account has logged into my personal iPhone and iPad

    If you are concerned.  
    Log off all iCloud and Apple ID accounts on your devices.
    Change you password for Apple ID and iCloud.
    Please read so you don't get stuck!
    http://support.apple.com/kb/HT5621

  • My Macbook Pro's iTunes App was logged in as someone else. I logged out of that account and logged into mine, but I found that the app still shows all of the previous account's content. None of my apps, songs, or movies are there!

    My Macbook Pro's iTunes App was logged in as someone else. I logged out of that account and logged into mine, but I found that the app still shows all of the previous account's content. None of my apps, songs, or movies are there! iTunes 12.1.0.50 on OS X Yosemite version 10.10. Why is iCloud doing this, and how do I view my content again?

    MacBook Pro  / Mozilla Firefox / Netflix / Silverlight Update solved - DON'T DWNLOAD FROM NETFLIX
    I solved this problem tonight. I have a MacBook Pro with 10.5.8. I know, it's old. But I love my Netflix and I recently noticed that Firefox plays Netflix much better.  Then I suddenly got this message that I needed to download the latest Silverlight - it only takes 30 seconds! - WRONG.   However, after much searching, I finally did the steps in order and it worked.  
    This was after repeatedly downloading Silverlight from the Netflix site without success.  So here's what I did:
    1. Went to http://www.microsoft.com/getsilverlight/Get-Started/Install/Default.aspx
    2. Followed the directions. I felt like such an idiot for not doing it right before.
    3. Go to your hard drive and search for "Silverlight" to locate ANY existing Silverlight files: .dmg, etc.
        [also check your Libary/ Internet Plug-ins, but the above search is faster]
    4. Drag it all to the trash and empty it.
    5. Go back to the Get  Silverlight page and click on the Install on that page, not the Netflix site.
    6. Note the steps for Safari or Mozilla Firefox - I wanted Firefox, so I follwed those instructions.
    7. Once it's installed, close all the browsers and Restart that bad boy. Right away.
    8. Open a browser, go to Netflix and proceed to joyfully rot your brain with Netflix content. Yay!

  • Well, I created a new Apple ID and I put money on it, I wanted to sign into ICloud and it wouldn't let me sign in due to the usage of too many Apple IDs created. The point for logging into the ICloud was to save my photos before I reset my phone.

    Well, I created a new Apple ID and I put money on it, I wanted to sign into ICloud and it wouldn't let me sign in due to making too many Apple IDs created. The point for logging into the ICloud was to save my photos before I reset my phone. Is there any way I could fix this? I also want to transfer my money because I think it's a waste to just forget about the $13.75 on my account. Thanks.

    I recently created a new apple ID
    Bad idea.
    Content bought with an Apple ID is forever associated with that Apple ID. Apple will not transfer content from one Apple ID to another and Apple will not merge Apple IDs. Unless you are prepared to forfeit all the previously purchased content and buy it all again with the new Apple ID, you will need to maintain the old ID to update and redownload your content.

  • Setting privilege level for logging into ASA through ACS

    Hi!,
    In my environment i implemented AAA for logging into switches, routers, asa etc through ACS which is being configured TACACS+.
    I have set different privilege levels like readonly, readwrite etc into ACS. There are working fine when i try to login into switch or router.
    But in ASA i am unable to restrict the privilege levels of different users.
    Can someone plz guide me with ASA & ACS setting to solve this issue!!!!!

    Hi!!
    I tried this option. It is working fine with routers & switches. But for ASA privilege access it is not functioning.
    I created 3 profiles in "Shared Profiles" & added 1 of them in Group setting & added users to this group with mentioning group authentication. This way i am able to control access to the switches & routers with proper privilege. But the same way when i tried to impolement ASA it's not happening.
    Can u plz check it out...

  • My account got logged into elsewhere chanegd my password foremail and everything so i cant change please help

    my account ************ got logged into elsewhere chanegd my password foremail and everything so i cant change please help

    Contact iTunes to try to recover use of your account
    Contact iTunes
    I also requested that p the moderators remove your email address.

  • What's the Default Password for Logging into huawei switches?

    I was wondering if I bought the Huawei switches,
    what’s the Default Password for Logging into them? so many people may have the same question that if bought a Huawei switch, what's the default password for logging into the switch? and maybe different kind of switches have different kind of passwords,
    so maybe all of us wanna know them clearly.
    Here, i'll tell you.
    As for the bootrom default code:
    Huawei S9300 V100R006 and the earlier version is 9300
    Huawei S7700 V100R006 and the earlier version is huawei
    And you can log into
    http://www.huanetwork.com/blog/whats-the-default-password-for-logging-into-huawei-switches/ for more information, really useful.

    Unfortunately your post is off topic as it's not specific to Microsoft Training and Certification.  
    This is a standard response I’ve written in advance to help the many people who post their question in this forum in error, but please don’t ignore it.  The links I provide below will help you determine the right forum to ask your question
    in.
    For technical issues with Microsoft products that you would run into as an end user, please visit the Microsoft Answers forum ( http://answers.microsoft.com ) which has sections for Windows, Hotmail,
    Office, IE, and other products.
    For Technical issues with Microsoft products that you might have as an IT professional (like technical installation issues, or other IT issues), please head to the TechNet Discussion forums at http://social.technet.microsoft.com/forums/en-us, and
    search for your product name.
    For issues with products you might have as a Developer (like how to talk to APIs, what version of software do what, or other developer issues), please head to the MSDN discussion forums at http://social.msdn.microsoft.com/forums/en-us, and
    search for your product or issue.
    If you’re asking a question particularly about one of the Microsoft Dynamics products, a great place to start is here: http://community.dynamics.com/ 
    If you think your issue is related to Microsoft Training and Certification and I've flagged it as Off-topic, I apologise.  Please repost your question and include as much detail as possible about your problem so that someone can assist you further. 
    If you really have no idea where to post your question please visit the Where is the forum for…? forum http://social.msdn.microsoft.com/forums/en-us/whatforum/ 
    When you see answers and helpful posts, please click Vote As Helpful,
    Propose As Answer, and/or Mark As Answer
    Jeff Wharton
    MSysDev (C.Sturt), MDbDsgnMgt (C.Sturt), MCT, MCSE: Data Platform & Business Intelligence
    Blog: Mr. Wharty's Ramblings
    Twitter: @Mr_Wharty
    MC ID:
    Microsoft Transcript

  • Is it possible to find out all of the computers from which MY iChat account has logged into?

    I think one or more people have been using MY iChat (mac.com) account to send out emails (pretending they are me). I've changed my password so it won't happen again, but Is there a way for me to see which computers have logged into/used MY iChat account?

    Hi,
    I am not aware of any way you can get iChat to reveal this info directly.
    You could use iChat with another Screen Name and Little Snitch.
    Little Snitch is a Utility that will tell you what IPs and Ports an App is trying to use.
    This way you add your old ID as a Buddy.
    If they are On line then send them a Video Invite.  You do not have to go the whole way but just enough for Little Snitch to tell you the IPs involved (A Public and possible a LAN IP).
    Once you get that far past the Little Snitch Pop ups you can end the chat
    Little Snitch will keep a running record in its Application Interface for you to fully note down the details (the ISP will also be listed)
    I would also contact Moblieme about this.
    If you can get hold of any of the email I would also look at the Full Header info
    In Mail you can set this in Viewing (Preferences).
    This will also list the ISP (Servers) it has passed through.
    You can also generally see if the name has been spoofed.
    10:57 PM      Wednesday; July 27, 2011
    Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb( 10.6.8)
     Mac OS X (10.6.8),
    "Limit the Logs to the Bits above Binary Images."  No, Seriously

  • Can a single account be logged into more than once at the same time

    -
    Firstly, please excuse me if this has already been asked - I tried searching for various terms but couldn't see anything.
    At present we run a single account (non-admin) on our iMac G5 which holds all out families photos/music/movies etc. I'm wanting to add a MacBook to our iMac. They would communicate either wirelessly, or via an ethernet hub. We would like to fire up the laptop and log into that same account, so all that information is available (read and write) from both computers, and at the same time.
    Is this possible? If so, how is it achieved. Is there some network settings that have to be made on the MacBook?
    I'm aware that there will be limitations - i.e. two people won't be able to modify the same file at the same time. Also that the iMac will have to be powered up for the account to be accessed etc.
    Finally, due to space considerations I'm wanting to move the home folder for our existing account onto an external FW drive (using the techniques I've found in other posts on this forum). Will this affect any solution to my original question?
    Thanks for your time.

    When you turn on file sharing, others can see your computer in the Finder > Go > Network window, where they can click on it to see what shares are available. These can be the public folders (which don't need a password to connect), or user folders (which do). By connecting to one of the shares, they then have access to the files within them. If you don't want to use an external disk, you can use SharePoints to share folders within your account, such as Music or Pictures. Just be aware that sharing files within a user account can run into permissions issues, for example trying to edit a document owned by someone else, which is one of the reasons to use an external disk. Tiger and Leopard also support Access Control Lists, but you need to know what you are doing.

  • How do I log out of someone elses itunes account and log into mine?

    I am trying to log out of my fiances itunes account so I can set up my new iphone and ipod nano with my itunes account.  I cant figure out how to log out of his account!  If I plug my phone in while his account is open, wont it delete all of my stuff (apps, contacts) and put all of his stuff on my phone??

    It is actually their phone. I logged into my game center account because they already had their account open on their new phone and wanted to play a game against another individual. I am however, no longer in contact with this person and they continue to utilize the account. I did change the password but wanted to confirm that had solved the issue. Thanks for your help!

  • Visual Studio Test Controller recovery locks out the user domain account, cannot log into PC

    On the recovery tab of the Visual studio Test controller Services properties dialog, there are three recovery settings:
    First Failure, Second failure and Subsequent failures. The default settings for these options is to "Restart the Service". I changed my domain password this morning, restared the PC and could not log in because the Visual Studio Test Controller
    service tried to restart with the wrong credentials in an infinite loop. This resulted in my account with the domain controller getting locked out. The delay between service restarts was very quick and I could not login and stop the service. The kind admin
    fellow logged in  to the PC and changed the service settings.
    Is there a place where the recovery service restart interval can be changed to prevent this situation?

    Hi bcautest1,
    >>I changed my domain password this morning, restared the PC and could not log in because the Visual Studio Test Controller service tried to restart with the wrong credentials in an infinite loop. This resulted in my account with the domain controller
    getting locked out.
    You said that you couldn't log in, do you mean that you couldn't log in your machine or others?
    If you change the domain password, generally we could open the Test Controller configuration and change the logon account for this service.
    But if you mean that you couldn't log in your windows now, I'm afraid that it is not the test controller and Agent issue, it would be the windows issue, because it still has this issue even if you use other servers.
    Reference:
    https://technet.microsoft.com/en-us/library/cc773155(v=ws.10).aspx
    Like the following documents here:
    http://stackoverflow.com/questions/4468677/domain-account-keeping-locking-out-with-correct-password-every-few-minutes
    Maybe the Window support forum would be better for you:
    https://social.technet.microsoft.com/Forums/windows/en-US/home?forum=w7itprosecurity
    If I misunderstood this issue, please feel free to let me know.
    Best Regards,
    Jack 
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • I used my daughter's itunes account to log into icloud but want to now put in my account information.  How do I change it without deleting her account?

    I used my daughter's itunes id to log into icloud as I forgot my information.  Now I have established my account information and want to remove hers to add mine.  I am afraid to "delete account" as I fear it will delete her information.  How do I change the icloud account?

    Go to iTunes menu, STORE and sign out.  Then you can sign in from there or create a new account which should match the account you have on your iPad and iPhone.

  • Administrator's account for logging in to the PS console (and AM console)

    Hi all,
    I created a new organization in my portal server using the management console. Now I'd like to create an administrator who can manage this new organization (adding/deleting channels and containers) using the PS console and manage its users (adding/deleting users, roles, ...) using the Acess Manager console. Obviously, the administrator of the new organization can't manage other organizations. I red something about delegated administrators with top-level admin role... the only administrators who can log in to the managment console of PS. Can you help me?
    Thank you in advance.

    Thank you for your reply.
    Because of the specifics I can only use Portal 7.1 with Acess Manager in Realm Mode.
    So, I have no way to login into psconsole with other administrators further than "amadmin". Do you confirm it?
    But as I red in:
    1) "Sun Java SystemAccess Manager 7.1 Postinstallation Guide" at page 34:
    Caution � AccessManager RealmMode is enabled by default. If you are
    deploying AccessManager withMessaging Server, Calendar Server,
    Delegated Administrator, or InstantMessaging, you must select Legacy
    Mode (AM_REALM=disabled) before you run the amconfig script.
    2) "Sun Java System Access Manager 7.1 Administration Guide" at page 21:
    Some features of AccessManager 6.3 are not available in the AccessManager 7.1 console.
    Because of this, administrators can log into the 6.3 console through a 7.1 Legacy deployment.
    This console is typically used where AccessManager is built upon Sun Java System Portal Server
    or other Sun Java System communication products that require the use of Sun Java System
    Directory Server as the central identity repository. Other features, suchDelegated
    Administration and Class of Service, are accessed only through this console.
    It's possible to login into AM console using delegated administrators. Do you confirm it?

  • How do i stop workstation users from saving their network password or credentials for logging into a 2008 R2 Server workgroup?

    I have a small workgroup of about 30 users that are a mix of XP Pro, 7 Pro and 8.1 desktop / laptop users that connect to a Windows 2008 R2 Server to use Quickbooks Enterprise, share files and printers. I dont want the users to be able to save their password
    on their workstations, I want them to have to log in every time they connect to the server. How do I turn that off?Is the something on the server in Group Policy or a secruity setting that will not allow a saved credential for logging onto the server?

    Hi,
    I have a small workgroup of about 30 users that are a mix of XP Pro, 7 Pro and 8.1 desktop / laptop users that connect to a Windows 2008 R2 Server to use Quickbooks Enterprise
    By connecting to the server, do you mean users log on locally or through remote desktop services, or just through network to access network resources instead of log on to the server directly?
    If it’s log on locally, please disable auto logon feature by configure the registry entry
    AutoLogonCount to 0, it is under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon.
    If it’s remote desktop connection, please clear Logon Credentials for corresponding remote desktop sessions.
    If it’s network access, then it is by design because network logon has a single-sign-on feature.
    More information for you:
    How to disable Auto Login?
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/705b0cf8-53f1-45f9-b6bf-2ba61c8d10bf/how-to-disable-auto-login?forum=winservergen
    How Interactive Logon Works
    http://technet.microsoft.com/en-us/library/cc780332(v=WS.10).aspx
    Best Regards,
    Amy
    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Maybe you are looking for

  • Possible to find session/user who ran SQL in v$SQLAREA ?

    Using this: select * from v$sqlarea where sql_text like '%2412982%' and sql_text like '%prms%' and module != 'sqlplusw.exe'; I am able to locate a particular instance of a piece of SQL being executed and stored in the library cache. However, I would

  • IPod not displayed under "My Computer"

    Thats basically the problem. I plug iPod into the computer and it registers on iTunes and everything. I have it enabled as a hard disk because I am trying to movie my library to my new computer. When I go into My Computer in order to put all the song

  • Prevent "Save As" dialog box from popping up when signing a form

    Is there a way to prevent the "Save As" dialog box from popping up when clicking on a Signature Field?  I have a form with multiple signature fields and I would like to disable this action from happening.

  • Mountain Lion downloaded, but not installed.

    I recently download Mountain Lion, but when the download finished, I recieved an error message saying "Product could not be installed. Check your internet connection." My internet connection was actually working fine. I would like to try and download

  • Checking for Oracle Home incompatibilities ...

    While installing oracle client 10.2.0.4. I came across this error. See below Checking the Components installed in Oracle Home Check complete. The overall result of this check is: Passed ================================================================