Question of the Day – AdminSDHolder


Which is the purpose of the AdminSDHolder object?



  1. Ensures that the objects like groups and users, to which applies administratives roles (those assigned through task delegation), have no more than the necessary permissions over accounts and protected groups.

  2. Prevents rights elevation over accounts and protected groups.

  3. Maintains the integrity of the permissions applied when delegating a specific tasks.

  4. 1 and 2.

  5. There is no such object.

I will publish the answer in the next days.


Regards.


Marcelo.

Comments (4)

  1. Anonymous says:

    Like many other groups, the idea of being protected is to prevent rights elevation.

    Just imagine a group membership administrator adding himself as Print Operator.

    Thanks for your comment.

    Have a nice day!

  2. Anonymous says:

    The right options are 1 and 2, or 4.

  3. tony says:

    my only question is why the heck did u add printer operators as a protected group?

  4. tony says:

    well if you give the farm away you’ve given the farm away!  If you have this group member admin doing things like this then what prevents them from altering more important groups, I’d hope acls on the important group objects and ou’s, thus the group member admin could maintain his list of groups but not others!