Re: Field Support Staff Administration of AD Servers

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Jerold Schulman (Jerry_at_jsiinc.com)
Date: 03/29/04 

Date: Mon, 29 Mar 2004 10:43:30 -0500

On Mon, 29 Mar 2004 07:16:10 -0800, "Michael"
<anonymous@discussions.microsoft.com> wrote:

>I am looking into what it will take to give our field support staff access to our AD environment. I want them to have full support ability on the servers that fall into their area of responsibility above and beyond of just OU administration. However I do not want them to be a member of the domain administrators group because I only need them to administer a few of the servers. Is anyone aware of MS documentation that explains this in detail? Has anyone ran into this situation themselves, if so what have you done to make it work?
>
>Thanks for everyone’s help!
>
>Sincerely,
>Michael

In addition to delegating OU Administration, you could add the Domain Support
Group to the local Administrators group on the 'few' servers. Depending on what
you want them to do, this may be all you need.

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com