Dear all, I want to grant a users permissions for doing server administrator jobs but I don't want he have full administrators right (for example, change his own permission, change permission to folder that he don't have permission) My I know what kind of permission should I grant to him? Should I grant him Account Operators, Backup Operators, Print Operators, Server Operators? Can him log-on server for administrative tasks?

What exactly he needs to do on server(s) ? Please check this MS article about built-in domain groups which allow servers management without the highest administrative privileges. http://technet.microsoft.com/en-us/library/cc756898(WS.10).aspx and you can also delegate appropriate rights to particular OUs within domain for his account/group http://support.microsoft.com/kb/235531 Regards, Krzysztof

Hello, please define the tasks she/he should be able to do in detail. Basically a domain user should not work on a server, except it is a Terminal/Remote desktop server.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Thanks a lot, he will help me on operation of IT, except change on Administrator account and group policy objects and access to user folder that he doesn't have access right. Most IT task I should let to do like. reset lockout account, general user account admin except the administrative right, check on event log and operation arcserve backup program.

Thanks for your note, I should think about whether I should give him the right for Server operator. I need someone can help me for critical administrative tasks when I'm out of office. Probably, our company don't prefer someone can operator on the server remotely. Any suggestion?

Hello, use delegate control according to: http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.