roles
Hi! I need a user to delegate certain administrative tasks, how to unlock accounts, creating user accounts, income from domain computers, printers and little configuration. I have several GPOs (30) and Windows 2003 with AD. How do I set these permissions for you do not have domain admin role?
May 8th, 2011 5:36am

you can use the "Delegation of Control Wizard": http://technet.microsoft.com/en-us/library/cc732524.aspxDon
Free Windows Admin Tool Kit Click here and download it now
May 8th, 2011 6:15am

Can be delegated at the domain level?
May 8th, 2011 7:50am

impossible to say, without knowing what you want to do, what your domain/forest looks like & consists of, and how you run your shop :)Don
Free Windows Admin Tool Kit Click here and download it now
May 8th, 2011 8:01am

Is a domain with 30 gpo. I have no forest, is a simple domain.
May 8th, 2011 9:52am

If you have Active Directory, then you do have a forest, but that's just as an FYI... You can use the "Delegation Of Control" wizard at the domain level, just as you would at any OU level. This wizard simply modifies the security permissions for the object. Its not required to use this wizard. if you are more of an advanced user, you can directly modify the ACL of the object. there are some builtin groups that already have these rights in the domain such as Account Operators, Printer Operators, etc... If one of those groups do not suffice, then I would recommend that you create your own Global Group and then provide the permissions using the wizard or directly. Then add this user to the group. The reason for the group rather than the user is that you only have to do this one time. You can then add/remove users from this group without having to worry about running the delegation again. Visit: anITKB.com, an IT Knowledge Base.
Free Windows Admin Tool Kit Click here and download it now
May 8th, 2011 12:27pm

Hello, delegate control can be used to achive what you like. See here for startring how to handle the delegation part: http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspx http://support.microsoft.com/kb/296999 http://support.microsoft.com/kb/932455 http://support.microsoft.com/kb/294952/en-us http://support.microsoft.com/kb/243327/en-us http://support.microsoft.com/kb/555986Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
May 8th, 2011 4:20pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics