Re: Allowing a Helpdesk User, or Group, to add users to a specific gro

From: Brendon (brendon_at_nospam-itology.net)
Date: 11/16/04


Date: Tue, 16 Nov 2004 17:21:51 -0000

Create a new Local Group on the server, then create a new Global Group in a
new OU on the domain. Add the Global Group to the Local Group on the server
then delegate control of the OU to people who need permission to add or
remove people to and from the Global Group.

"JC The PC Guy" <JCThePCGuy@discussions.microsoft.com> wrote in message
news:2D40CAF9-C4BB-4255-9018-3035FA896C03@microsoft.com...
> Hello all,
>
> I am running a Windows server 2003 server as a terminal server. There is
> an
> application that has been installed that the Local Administrators are not
> managing fully. I am trying to allow the makers of this application to
> set
> rights for their program, without affecting anything else on the server.
> How
> can I give this user, or their group the ability to add users to a group
> they
> need for their program without making them administrators for the domain?
>
>
> Thanks in advance for any help you can provide.
>
> - JC



Relevant Pages

  • Re: DC added to workgroup now has problems
    ... > to get our department AD server to work properly on this new network. ... A trust relationship essentially says: I, the trusting domain, is giving the ... Never give permissions to a global group, ... user membership to a local group if that user comes from a trusted domain. ...
    (microsoft.public.win2000.networking)
  • local group / global group permissions problem
    ... Windows 2003 file server in an Active Directory domain ... The local group has full rights to the share. ... contains a global group from the Active Directory domain. ... User in global group should be able to access the shared folder based on the ...
    (microsoft.public.windows.server.security)
  • Re: how to add NT domain local group security on win2000
    ... This problem will not exist after you upgrade the ... |My original plan is to upgrade the NT File Server first then NT Domain. ... |It will be too complicated to change all Local group to Global group. ...
    (microsoft.public.windows.server.migration)
  • Re: Best Practice for Group Names
    ... single server with correct security applied to the resources would do very ... Or if going into the domain to control that share you want to ... Also for scope I mostly work with very large companies and governments, ... into Local group nesting stuff you tend to be wasting space in your ...
    (microsoft.public.windows.server.security)
  • RE: Local Group Migration on SAN Disk
    ... Local Group Migration on SAN Disk ... | We are currently facing a file server migration within the same Domain ...
    (microsoft.public.windows.server.migration)

Quantcast