What Are the Implications of Removing SYSTEM Account Permissions on Active Directory Users and Computers (ADUC) snap in ?

[IT Researcher007]

We are currently using Windows Server 2012 in our domain controller environment. On our domain controller, we have denied other user accounts from having full privileges in ADUC snap in to limit their access to view or change Active directory users and computer objects . We have some doubt on whether "SYSTEM" account can also be removed from access , since we want to limit the modify privileges to only certain accounts. According to Microsoft’s documentation, it is generally advised not to remove permissions from the SYSTEM account. The document mentions that removing SYSTEM account permissio

Continue reading...