Delegating Control...

Hello:

After a series of errors due to to many people having domain admin accounts
I have finally decided to run the Delegation of Control wizard and restrict
users access. I created a group and want to only allow them to do the
following.

1. Join Computers to the domain
2. Move computers between OU's
3. Reset user passwords
4. Create Exchange Mailboxes
5. Add and remove groups to users.

I tried to use the Delegation of Control wizard but it didn't seems to give
me these options. Does anyone have experience running this who could help
me out. Thanks.

Harrison Midkiff


.

Relevant Pages

  • Re: Access denied message even with the Administrator user
    ... > 888204 How to use the Delegation of Control Wizard to grant permissions to ... > run Delegation of Control Wizard. ... > This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Deligating control
    ... this is possible through the Delegation of Control Wizard. ... If you delegate the creation of computer accounts to a group (e.g. ... To reset user passwords you need the "Reset Password" extended right on the ...
    (microsoft.public.windows.server.active_directory)
  • Re: User / Resource Admin Tool
    ... If you are running a Windows 200X Active directory and Exchange 200X you can ... give most of these permissions via the Delegation of Control Wizard in ... Here is the Microsoft "Step-by-Step Guide to Using the Delegation of Control ...
    (microsoft.public.exchange.admin)
  • Re: What are the minimum permissions needed to move computers in A
    ... This is not available on the delegation of control wizard, ... Si Vis Pacem, Para Bellum - ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain permissions
    ... run through the Delegation of Control wizard: ... Enterprise Engineering Center ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.windows.server.general)