How to restrict Active Directory security groups and block membership modifications
HTML-код
- Опубликовано: 26 авг 2024
- Learn how to setup deny permissions on security groups so that specific users or groups are unable to make modifications to the group membership. In this example, I show you how to amend the security permissions of Active Directory security groups to block specific members or members of security groups from making changes to the initial security group.
Hi, I’m Danny, a London based IT consultant and blogger. You can view all my blog posts at: www.dannymoran...
![FNAF Into the Pit has A LOT of Unused Graphics | LOST BITS [TetraBitGaming]](http://i.ytimg.com/vi/6YhZCRdipl4/mqdefault.jpg)
Your channel is amazing man, learnt alot of new things about active directory (especialy strenghten security like domain admin and enterprise admins usage or user restrictions to add computers to the domain)
Keep up the amazing work.
Can you consider doing a video about usb restrictions (mass storage units) with white list devices? For allowing users to use only some usb sticks not all of them
Have a good day!
I've never actually used whitelisting for this. I always block all mass storage devices.
Our process is, if someone needs to write data to a mass storage device then it needs signoff by the data protection team and then it gets copied to an encrypted drive by an IT team member and then handed to the user.
In most cases, we have better ways to transfer data than a usb drive.
Thanks for watching!
Great video as always, Danny. Would you mind making a video on how to setup a mandatory profile one day? Thanks for your videos :)
I haven't used mandatory profiles for a while, but, I've added it to my list and will take a look into creating a guide at some point.
Thanks for watching!
Hey Danny, I think your vide are great! These vids are everyday Sys admin tasks and troubleshooting we come across and I think so many will benefit from your vids. They are nice and short and to the point.
Are you currently a Sys admin for a company or do you only do RUclips?
My full-time job for the past decade has been system administration.
I write these technical blog posts and videos in my spare time.
Thanks for watching!
@@danny_moran Brilliant! Thanks again!