azure devops server : revoke access from Domain Admin User

0
votes

I'am recently installed Azure DevOps Server 2019 in on-premises server.

However, i'am so confused : How i can block access from Domain Admin User Group : all memebers can access and manage all project and collection

I ask for idea to implement that

Thank you

EDIT :

I also try to delete the user admin group via TFS Console , but not work

enter image description here

2
azure-devopsazure-devops-server-2019

2 Answers

1
votes

azure devops server : revoke access from Domain Admin User

You could try to remove the Domain Admin User Group from its parent group, like Project Collection Administrators.

  • Check which group the domain admins group is a member of

  • In Team Foundation Server Administration Console tool, navigate to Group Membership page. Find out the Domain Admin User Group is under which groups, and remove:

    enter image description here

  • Or you can move the member in that group:

    enter image description here

Hope this helps.

0
votes

It's work

I remove the AD domain admin group from the local group administrator , with this way ; only the specific user in the local group administrator , can access to all project