Newly created domain user can edit Active Directory Users and Computers

[Mark Sheffield]

I am trying to add a junior admin to our domain environment. I've created an account and added RSAT to that PC and realize that a limited user can by default edit ADUC without any delegation be associated. Is there anything I can look for under the "domain" Properties>Securities>Advanced>Effective Access that might give me a clue as to why? Thanks

Continue reading...