Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Why AD objects created always have the "domain admins" as owner ?
Why AD objects created always have the "domain admins" as owner ? [message #393388] Wed, 17 February 2010 05:21 Go to next message
Eric  is currently offline Eric  Netherlands
Messages: 130
Registered: July 2009
Senior Member
Hello,

my account is member of the domain admins.
Every time that I create an object, the owner displayed is the Domain
Admins and not my user account.

I know that there is a GPO for files and folders created by an admin to
specify that the user who created the object is the owner (and not the
admin if the user is an admin too) but is it possible to do the same
with an AD object (and so let a user the user as the owner of an
object even if it is member of the domain admins groups)?

thank you

--
Eric
Re: Why AD objects created always have the "domain admins" as owner ? [message #394412 is a reply to message #393388] Thu, 18 February 2010 10:43 Go to previous message
Jorge Silva  is currently offline Jorge Silva
Messages: 398
Registered: July 2009
Senior Member
Hi
That's by design, Domain Admins have and should have always those rights
over domain created objects.
Domain Admins is the default owner of any object that is created by any
member of the group
http://support.microsoft.com/kb/243330


--

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.




"Eric" <Eric_m@nospam.hotmail.com> wrote in message
news:mn.8b217da2591f6f0c.70874@nospam.hotmail.com...
> Hello,
>
> my account is member of the domain admins.
> Every time that I create an object, the owner displayed is the Domain
> Admins and not my user account.
>
> I know that there is a GPO for files and folders created by an admin to
> specify that the user who created the object is the owner (and not the
> admin if the user is an admin too) but is it possible to do the same with
> an AD object (and so let a user the user as the owner of an object even
> if it is member of the domain admins groups)?
>
> thank you
>
> --
> Eric
>
>
Previous Topic:windows 2008 R2 DC questions
Next Topic:Domain certificate error
Goto Forum:
  


Current Time: Tue Jan 23 16:22:10 MST 2018

Total time taken to generate the page: 0.52188 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software