Re: Admin rights for an OU

From: Ulf B. Simon-Weidner [MVP] (nospam2-ulf_at_usw-consulting.com)
Date: 06/08/04 

Date: Tue, 08 Jun 2004 12:39:41 -0700

"Cindy" <anonymous@discussions.microsoft.com> wrote in message
news:19fe101c44d8d$72df2290$a001280a@phx.gbl:
> Is there a way to give a user OU Admin rights.
> Equivilant to Domain Admin rights, but only for the OU
> that they are in. I've looked at AC Delegation of
> Authority, but they will not be doing AD tasks, so that
> will not help. I want their login to have Admin rights
> to their OU???? (without having Domain Admin rights)
> Any help or ideas will be greatly appreciated!!!!
>
> thanks - Cindy

Hello Cindy,

Domain Admins are Domain Admins, you are able to delegate a lot of
rights to a OU but what Tasks are they doing? Do they need to be local
Administrators on the Computers in that OU? Do they have to create
users, groups and computers in that OU? What is your goal? 

-- 
Gruesse - Sincerely,
Ulf B. Simon-Weidner

Relevant Pages

  • Re: Admin Acct
    ... > We have an obligation in security documentation to discuss the least ... > SMS without Domain Admin rights. ... >> wants to use advanced security, local admin rights and no domain admin ...
    (microsoft.public.sms.admin)
  • Re: Admin Rights on Client
    ... Log in to the client as the local Administrator and password, set the domain window to the machine's name before clicking OK. ... You will be prompted to provide your domain admin ... Subject: Admin Rights on Client ...
    (microsoft.public.windows.server.sbs)
  • Re: Admin rights for an OU
    ... >> Equivilant to Domain Admin rights, ... >Administrators on the Computers in that OU? ... software, install printers, etc. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security setup
    ... Advanced security does not require schema extending. ... We never need domain admin rights, we do need admin rights on all ... clients if you want to use client push. ...
    (microsoft.public.sms.setup)
  • Re: Admin rights for an OU
    ... over that OU by Delgating control. ... >> Equivilant to Domain Admin rights, ... >Administrators on the Computers in that OU? ...
    (microsoft.public.windows.server.active_directory)