Delegation Wizard
I created an ITS Global Group to allocate its users there, ok I'm in the
delegation wizard trying to understand how to delegate to these users the
option * add computers to the network* without allow them be account
operators. I mean I can't find the right permission that explicit give me
that option.?? and where I must to spply the delegaion en el default
computers OU Built-In or not !!
**At the same time I have the same situation with server operators; I need
to give them the option to be full domain managers in daily basics without
add them in the gropu domain admins.??
Thanks any help about it !!!
.
Relevant Pages
- Re: Custom rights
... create an account he goes thru the process fine until I arrive to the "Create ... > By default any user can log onto a server other than domain controller. ... > To add computers to the domain go to AD Users and Computers. ... >> Look into AD delegation, though you may need to do some custom delegation. ... (microsoft.public.win2000.security) - Re: Delegation Wizard
... > computers OU Built-In or not!! ... * Configure the delegation of control wizard as mentioned in the links ... * create separate admin accounts to perform admin tasks ... * Create an OU for the Admin roles and the admin tasks ... (microsoft.public.win2000.active_directory) - RE: Delegation of duties to junior administrator
... This will help you to be able to customize the delegation ... define templates for use in this wizard. ... That gives members in this group, full admin ... With computers being separate from servers, this only allows the members to ... (microsoft.public.windows.server.active_directory) - Re: Delegating permission to add computers to the domain
... Delegation is needed, not on the Computers container. ... I don't believe sysprep joins machines to OUs where groups have been ... (microsoft.public.windows.server.active_directory) - Re: Need limited domain admin rights user account.
... change you see and are attributing to an action of the delegation wiz. ... "Mike Bailey" wrote in message ... > You said that there is a group for allowing an account to add computers ... >> account) to which it is delegating. ... (microsoft.public.windows.server.security) |
|