Re: I need help with configuring GP?
- From: "Florian Frommherz [MVP]" <florian@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 15 Nov 2007 10:59:32 +0100
Howdie TD!
TD schrieb:
Hello folks. I need some help. I am trying to figure out how I can use GP in a Windows 2003 environment to give rights to a "limited Admin person" to be able to create email enabled user & computer accounts, as well as delete these same records at the OU level only. Which settings do I need to set to make this happen, + bind these settings to the specific OU?
You wouldn't do that with Group Policy, as Group Policy always triggers sort of client machines.
What you want to achieve is granting Active Directory priviledges to user in order to create/manage objects. Just fire up "Active Directory Users and Computers" and right-click your OU - then click "Delegate Control...". That opens a wizard that will help you grant those people appropriate rights. It's pretty much straight-forward.
cheers,
Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
.
- Prev by Date: Re: Roaming profile
- Next by Date: Re: Network Drive Mapping with AD User Group
- Previous by thread: Re: I need help with configuring GP?
- Next by thread: Re: I need help with configuring GP?
- Index(es):
Relevant Pages
|