As an administrator, how can i delegate some users to permit/enable them to add/delete/edit domain users in my Windows 2008r2 enviroment thanks 

start reading it from here http://www.activewin.com/win2000/step_by_step/active_directory/delegsteps.shtmlhttp://www.arabitpro.com

start reading it from here http://www.activewin.com/win2000/step_by_step/active_directory/delegsteps.shtmlhttp://www.arabitpro.com

Hello, By using the concept of delegation of administration, we can accomplish it. Besides above post another useful link for you http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.htmlRegards, Ravikumar P

Hi, How are things going? I just want to check if the information provided was helpful. If there is any update or concern, please feel free to let us know. Best Regards, AidenAiden Cao TechNet Community Support

Thanks for the help.. Yes that solved my problem In connection to this. How can I allow then admin/domain admin only to log to the server either locally or remotely?

By Defualt domain administrator will be having access to login to domian controllers. If you are willing to grant a domain users or members of a group to DC locally then you need to define allow logon locally policy http://technet.microsoft.com/en-us/library/cc785165(v=ws.10).aspx If you arr looking for Logon remotely then you need to define allow logon via terminal services http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/c8709b32-e950-4299-b1a5-704285dee7b1 Regards, _Prashant_MCSA|MCITP SA|Microsoft Exchange 2003 Blog - http://prashant1987.wordpress.com Disclaimer: This posting is provided AS-IS with no warranties/guarantees and confers no rights.