0

I'am recently installed Azure DevOps Server 2019 in on-premises server.

However, i'am so confused : How i can block access from Domain Admin User Group : all memebers can access and manage all project and collection

I ask for idea to implement that

Thank you

EDIT :

I also try to delete the user admin group via TFS Console , but not work

enter image description here

Quentin Merlin
  • 664
  • 1
  • 6
  • 31

2 Answers2

2

azure devops server : revoke access from Domain Admin User

You could try to remove the Domain Admin User Group from its parent group, like Project Collection Administrators.

  • Check which group the domain admins group is a member of

  • In Team Foundation Server Administration Console tool, navigate to Group Membership page. Find out the Domain Admin User Group is under which groups, and remove:

    enter image description here

  • Or you can move the member in that group:

    enter image description here

Hope this helps.

Leo Liu
  • 71,098
  • 10
  • 114
  • 135
  • 1
    Some group cannot be deleted – Quentin Merlin May 01 '20 at 09:29
  • @KivenWanda, Try to find the parent groups, then move this group from the member not work for you? – Leo Liu May 01 '20 at 09:33
  • @KivenWanda, um, can not remove it? Or any other, would you please share some more info about this issue and what have you tried? If possible, please check this thread:https://developercommunity.visualstudio.com/content/problem/868198/tfs-can-you-delete-the-domain-admins-under-the-win.html – Leo Liu May 01 '20 at 09:55
  • I've add a image to more explain , in my question – Quentin Merlin May 01 '20 at 10:11
0

It's work

I remove the AD domain admin group from the local group administrator , with this way ; only the specific user in the local group administrator , can access to all project

Quentin Merlin
  • 664
  • 1
  • 6
  • 31