Setting specific permissions without giving full Domain Admin membership
I have a Desktop Tech, that we want to be able to give permissions to add domain groups to local computer groups without having Domain Admin membership. I've looked through most of the GPO's and researched, but haven't found if this is possible or not. Any help on this would be appreciated. :)
September 5th, 2012 12:39pm

Hi, Thanks for posting in Microsoft TechNet forums. We can try delegating permissions to this user: Delegate Permissions for a Group or User on a Group Policy Object http://technet.microsoft.com/en-us/library/cc754542.aspx Regards Kevin
Free Windows Admin Tool Kit Click here and download it now
September 5th, 2012 10:53pm

Hi, Thanks for posting in Microsoft TechNet forums. We can try delegating permissions to this user: Delegate Permissions for a Group or User on a Group Policy Object http://technet.microsoft.com/en-us/library/cc754542.aspx Regards Kevin
September 5th, 2012 10:57pm

Local Groups can be managed by Local Administrators. Add Tech account to the local Administrators group on target computers.Microsoft Certified Trainer; Microsoft Security Trusted Advisor; Cisco Certified Systems Instructor; Certified Ethical Hacker.
Free Windows Admin Tool Kit Click here and download it now
September 6th, 2012 12:34pm

Local Groups can be managed by Local Administrators. Add Tech account to the local Administrators group on target computers.Microsoft Certified Trainer; Microsoft Security Trusted Advisor; Cisco Certified Systems Instructor; Certified Ethical Hacker.
September 6th, 2012 12:35pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics