Re: delegate admin rights to an OU

Hi!

- install programs that need local admin rights: Server operators
- take backup: Backup operators, Server operators
- share files: Server operators
- create and share printers: Print operators, Server operators
- add computers to domain: Add workstation to domain user right
- create users, reset password for other users in his OU: delegation of
administrative controll

Add user to Server operator, create GPO to grant user "Add workstation to
domain" and delegate him control for appropriate tasks in OU. I would
suggest using group for delegation and for assignig user rights.

HTH

Toni

"Tomppa" <tofors99@xxxxxxxxxxx> wrote in message
news:uaY1bxNDHHA.4256@xxxxxxxxxxxxxxxxxxxxxxx
Is it possible to give an user in a branch office so much rights with
delegate control and group policies, so he could administrate their DC
without help from the domainadmin?

the local admin should be able to:
- install programs that need local admin rights
- take backup
- share files
- create and share printers
- add computers to domain
- create users, reset password for other users in his OU

Is this possible with a reasonable amount of work?

Tomppa



.

Relevant Pages

  • Re: Problem with Terminal Services on 2003
    ... Terminal Services users must have Modify ... >> Terminal services implies a local logon. ... >> disallow all but admin, server operators, backup to logon locally. ...
    (microsoft.public.win2000.general)
  • Re: Problem with Terminal Services on 2003
    ... Codigo, thanks for the reply. ... I tested by making a normal user a member of the Server Operators and Backup ... > Terminal services implies a local logon. ...
    (microsoft.public.win2000.general)
  • Re: delegate admin rights to an OU
    ... Yes, but if I put the user in Server operators group, then he can also ... take backup: Backup operators, Server operators ... suggest using group for delegation and for assignig user rights. ... delegate control and group policies, so he could administrate their DC ...
    (microsoft.public.windows.group_policy)
  • Re: Send Message - Admin Rights
    ... try placing users into "Server Operators" group instead of Administrators. ... How do you send messages using Task Manager? ... messages using that message does require Local Admin rights. ...
    (microsoft.public.windows.server.general)
Loading