roles
Hi!
I need
a
user to delegate
certain
administrative
tasks,
how to unlock
accounts,
creating
user accounts, income from
domain
computers,
printers
and little
configuration.
I have
several GPOs
(30)
and Windows
2003 with
AD.
How do I set
these
permissions
for you do not have
domain
admin role?
May 8th, 2011 5:36am
you can use the "Delegation of Control Wizard":
http://technet.microsoft.com/en-us/library/cc732524.aspxDon
Free Windows Admin Tool Kit Click here and download it now
May 8th, 2011 6:15am
Can be
delegated
at the domain level?
May 8th, 2011 7:50am
impossible to say, without knowing what you want to do, what your domain/forest looks like & consists of, and how you run your shop :)Don
Free Windows Admin Tool Kit Click here and download it now
May 8th, 2011 8:01am
Is a
domain
with 30
gpo.
I have no
forest,
is
a simple
domain.
May 8th, 2011 9:52am
If you have Active Directory, then you do have a forest, but that's just as an FYI...
You can use the "Delegation Of Control" wizard at the domain level, just as you would at any OU level. This wizard simply modifies the security permissions for the object. Its not required to use this wizard. if you are more of an advanced user,
you can directly modify the ACL of the object.
there are some builtin groups that already have these rights in the domain such as Account Operators, Printer Operators, etc... If one of those groups do not suffice, then I would recommend that you create your own Global Group and then provide the
permissions using the wizard or directly. Then add this user to the group.
The reason for the group rather than the user is that you only have to do this one time. You can then add/remove users from this group without having to worry about running the delegation again.
Visit: anITKB.com, an IT Knowledge Base.
Free Windows Admin Tool Kit Click here and download it now
May 8th, 2011 12:27pm
Hello,
delegate control can be used to achive what you like. See here for startring how to handle the delegation part:
http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspx
http://support.microsoft.com/kb/296999 http://support.microsoft.com/kb/932455 http://support.microsoft.com/kb/294952/en-us
http://support.microsoft.com/kb/243327/en-us http://support.microsoft.com/kb/555986Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
May 8th, 2011 4:20pm


