delegating restricted control of active directory to junior network admin
From: Akhlaq Khan (auzkhan_at_newsgroup.nospam)
Date: 08/03/04
- Next message: jann michael: "Re: how to remove IE,accessories and outlook express in start menu"
- Previous message: Matthew Swanson: "Re: Restricted Groups GPO"
- Next in thread: Jérôme Moinard: "RE: delegating restricted control of active directory to junior networ"
- Reply: Jérôme Moinard: "RE: delegating restricted control of active directory to junior networ"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 3 Aug 2004 11:20:29 +0500
hi,
i have windows server 2003 AD running for our domain on office LAN. we have
been thinking about adding an "additional domain controller" (windows 2003)
for redundancy. I want to give its control to my junior network admin but in
a restricted way. for example, i do not want him to be able to login/change
password for the administrator account or do anything that might be
disastrous or even breach the security (he is a junior). what i do want to
give him the rights for is : to create and manage new accounts, add/remove
workstations to/from domain and do other basic things.
my question is: is there a way in windows 2003 to define these privileges on
such a granular level and delegate control of AD to somebody else? if not,
how do enterprises manage their domains ? (I am sure they have a separate
department with more than one network professionals for maintainance and not
everyone of them is an administrator).
thanks!
akhlaq.
- Next message: jann michael: "Re: how to remove IE,accessories and outlook express in start menu"
- Previous message: Matthew Swanson: "Re: Restricted Groups GPO"
- Next in thread: Jérôme Moinard: "RE: delegating restricted control of active directory to junior networ"
- Reply: Jérôme Moinard: "RE: delegating restricted control of active directory to junior networ"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
