I'm in an Active Directory domain, remoted into a Server in which my domain account is in the Administrators group.
Someone else removes me from that Administrators Group while I'm still logged in. However, I still retain all my admin rights until I log off.
That seems counterintuitive, so I wonder if there is something that I'm missing? I've seen the question about emergency logoff - is this my only choice, or are there other ways to force at least a permission update to the user so that while they may still be logged in, they at least no longer have admin rights?
permissions
andrights
, so just to clarify (because I think it's important to make the distinction); while being a member of the Administrators group does profferpermissions
on objects in AD, as well as the file system, the complementing aspect are theuser rights
granted to users in the Administrators group. In the context of this question, when you talk about thepermissions
you're granted as a member of the domain Administrators group I think you're really referring to theuser rights
granted to you via that group membership.