Hey guys,
I am looking to tighten up security on a 2008r2 domain. We have the default accounts and groups that reside in the BuiltIn and Users containers. I know some of these cannot be moved,http://technet.microsoft.com/en-us/library/cc756898(v=ws.10).aspx but I do want to try to secure these as much as possible. Just trying to find out what accounts need permissions on those containers/restricted objects like System, Network Service, etc.
Thanks,
Dan
Dan Heim