Re: OU Delegation

From: aaron (aaron_at_fake.net)
Date: 12/22/04


Date: Wed, 22 Dec 2004 08:46:21 -0600

Why not load the admin tools on the site admins computer. He can connect
without logging into the DC.

-- 
aaron
A+,NET+,MCSE 2K/2K3,CNA,CCNA
"Fred Yarbrough" <fcyarbrough@yahoo.com> wrote in message 
news:O5XXbtF5EHA.1300@TK2MSFTNGP14.phx.gbl...
>
> BACKGROUND:
> We have a sister company in Knoxville (connected to us via a WAN link) who
> uses our domain.  We located a DC there and they have a couple of other 
> file
> and printer sharing machines too.  I created them an OU for their site and
> added their users, computers, DC, and servers to this OU.  This all works
> like a champ.
>
>
> PROBLEM:
>  I need to allow their onsite admin to be able to administrator their OU.
> They need to be able to login to the DC and do things and to perform basic
> administrator functions for their site.  I added this user to the Delegate
> Control function for their OU but it does not seem to allow them to login 
> to
> the DC.  Is there something special that I must do to permit this?  The DC
> is also used for some minor file sharing.  In the past this admin was just
> granted Domain Administrator rights but I am trying to reduce their
> privileges to only allow them to administrator their own OU.
>
> Thanks,
> Fred
>
> 


Relevant Pages

  • Re: OU Delegation
    ... "Fred Yarbrough" wrote in message ... > I need to allow their onsite admin to be able to administrator their OU. ... > administrator functions for their site. ...
    (microsoft.public.win2000.active_directory)
  • Re: OU Delegation
    ... "Fred Yarbrough" wrote in message ... > I need to allow their onsite admin to be able to administrator their OU. ... > administrator functions for their site. ...
    (microsoft.public.win2000.security)
  • Re: OU Delegation
    ... Why not load the admin tools on the site admins computer. ... "Fred Yarbrough" wrote in message ... > I need to allow their onsite admin to be able to administrator their OU. ...
    (microsoft.public.win2000.security)
  • Re: Alternative to Windows Explorer
    ... One drawback if you use that "runas" approach then you really won't know ... Administrator versus their using their actual account. ... admin, a variation of their normal account. ... > pen testing experience in our state of the art hacking lab. ...
    (Security-Basics)
  • Re: Impact of removing administrative rights in an enterprise running XP
    ... The user probably had to be an administrator to get the virus in the ... You just apply the patch as an admin, ... Regardless, to speak more to the OP, yes, your support model will most ... Impact of removing administrative rights in an enterprise ...
    (Focus-Microsoft)