cancel
Showing results for 
Search instead for 
Did you mean: 

Domain Admin Privileges when using Active Directory as an Authentication Server

New Contributor

Domain Admin Privileges when using Active Directory as an Authentication Server

Dear friends,

in short: why are domain admin privileges or at least delegated privileges needed?

https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB40401
4 REPLIES 4
New Contributor

Re: Domain Admin Privileges when using Active Directory as an Authentication Server

Is the delegate control needed the active directory authentication server is configured as a ldap server?
New Contributor

Re: Domain Admin Privileges when using Active Directory as an Authentication Server

Is the delegate control needed if the active directory authentication server is configured as a ldap server?
Moderator

Re: Domain Admin Privileges when using Active Directory as an Authentication Server

They are required by MS to complete the join process, change the machine password, proxy user authentication, and search the directory.
Moderator

Re: Domain Admin Privileges when using Active Directory as an Authentication Server

No; the user can be simply an admin
It is theoretically possible to configure the LDAP server admin with a standard user account that is able to query the directory