Setting specific permissions without giving full Domain Admin membership
I have a Desktop Tech, that we want to be able to give permissions to add domain groups to local computer groups without having Domain Admin membership. I've looked through most of the GPO's and researched, but haven't found if this is possible or not.
Any help on this would be appreciated. :)
September 5th, 2012 12:39pm
Hi,
Thanks for posting in Microsoft TechNet forums.
We can try delegating permissions to this user:
Delegate Permissions for a Group or User on a Group Policy Object
http://technet.microsoft.com/en-us/library/cc754542.aspx
Regards
Kevin
Free Windows Admin Tool Kit Click here and download it now
September 5th, 2012 10:53pm
Hi,
Thanks for posting in Microsoft TechNet forums.
We can try delegating permissions to this user:
Delegate Permissions for a Group or User on a Group Policy Object
http://technet.microsoft.com/en-us/library/cc754542.aspx
Regards
Kevin
September 5th, 2012 10:57pm
Local Groups can be managed by Local Administrators. Add Tech account to the local Administrators group on target computers.Microsoft Certified Trainer; Microsoft Security Trusted Advisor; Cisco Certified Systems Instructor; Certified Ethical Hacker.
Free Windows Admin Tool Kit Click here and download it now
September 6th, 2012 12:34pm
Local Groups can be managed by Local Administrators. Add Tech account to the local Administrators group on target computers.Microsoft Certified Trainer; Microsoft Security Trusted Advisor; Cisco Certified Systems Instructor; Certified Ethical Hacker.
September 6th, 2012 12:35pm