Re: Admin rights for an OU

From: Cindy (anonymous_at_discussions.microsoft.com)
Date: 06/09/04 

Date: Wed, 9 Jun 2004 08:46:08 -0700

>-----Original Message-----
>"Cindy" <anonymous@discussions.microsoft.com> wrote in
message
>news:19fe101c44d8d$72df2290$a001280a@phx.gbl:
>> Is there a way to give a user OU Admin rights.
>> Equivilant to Domain Admin rights, but only for the OU
>> that they are in. I've looked at AC Delegation of
>> Authority, but they will not be doing AD tasks, so that
>> will not help. I want their login to have Admin rights
>> to their OU???? (without having Domain Admin rights)
>> Any help or ideas will be greatly appreciated!!!!
>>
>> thanks - Cindy
>
>Hello Cindy,
>
>Domain Admins are Domain Admins, you are able to
delegate a lot of
>rights to a OU but what Tasks are they doing? Do they
need to be local
>Administrators on the Computers in that OU? Do they have
to create
>users, groups and computers in that OU? What is your
goal?
>
>--
>Gruesse - Sincerely,
>
>Ulf B. Simon-Weidner
>.
>Thanks for your reply--
They will not be doing anything in AD - basically I guess
what I need is for them to have local admin rights on all
computers in that OU. Can I set that? If so how?
 I want them to be able to run updates, install some
software, install printers, etc. Things our users can
not do, but I don't want them to have to call me, nor do
want to give the 2 people full domain rights.
Thanks again for your help!!!!
Cindy

Relevant Pages

  • Re: Admin Acct
    ... > We have an obligation in security documentation to discuss the least ... > SMS without Domain Admin rights. ... >> wants to use advanced security, local admin rights and no domain admin ...
    (microsoft.public.sms.admin)
  • Re: Admin Rights on Client
    ... Log in to the client as the local Administrator and password, set the domain window to the machine's name before clicking OK. ... You will be prompted to provide your domain admin ... Subject: Admin Rights on Client ...
    (microsoft.public.windows.server.sbs)
  • Re: Admin rights for an OU
    ... "Cindy" wrote in message ... > Equivilant to Domain Admin rights, ... Administrators on the Computers in that OU? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security setup
    ... Advanced security does not require schema extending. ... We never need domain admin rights, we do need admin rights on all ... clients if you want to use client push. ...
    (microsoft.public.sms.setup)
  • Re: Admin rights for an OU
    ... over that OU by Delgating control. ... >> Equivilant to Domain Admin rights, ... >Administrators on the Computers in that OU? ...
    (microsoft.public.windows.server.active_directory)