Re: delegation

From: Chriss3 [MVP] (noSpamHere_at_chrisse.se)
Date: 03/20/05


Date: Sun, 20 Mar 2005 17:20:21 +0100

1. This is a hard way to do it, but the only way I found out to delegate
access to event logs on Windows Server 2003.
See. http://www.chrisse.se/MAQB.asp?ID=58
You can always add the group/user to the local administrator group at member
servers.

2. This can only be done if they are members of the local administrators
group,
See. http://www.chrisse.se/MAQB.asp?ID=29

3. Yes use the Delegate of Control Wizard with in Active Directory Users and
Computers, DSACLS, or ADSIEdit.

4. Delegate Replicating Directory Changes at the specific partitions you
want them to have the right to trig a replication.

-- 
Regards
Christoffer Andersson
Microsoft MVP - Directory Services
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"Rehan Khurram" <RehanKhurram@discussions.microsoft.com> skrev i meddelandet 
news:ECBB93D4-1BC8-4027-875A-ECADC80027A6@microsoft.com...
> Dear All,
>
> I am running Windows 2000 Active Directory and want to delegate following
> rights on a ordinary user which is not part of domain admin group, 
> enterprise
> admin group etc...
>
> 1. Clear and save all event logs.
> 2. can change administrator passowrd of all cleint computers  running
> Windows 2000 professioanl or XP from domain controller MY
> computer\manage\connect remote client computer and then  users to change
> adminsitrator password.
>
> 3. Can create distribution Group email address for exchange 2000
>
> 4. can replicate all dcs within the domain from AD sites and Services.
>
> Hoping for the best and thanks
>
> Regards
> Rehan
>
> 


Relevant Pages

  • Re: XP Pro - Active Directory User Unable to set Desktop
    ... How to configure Active Directory diagnostic event logging in Windows Server ... | I can successfully add the PCs to the domain, login as the AD user to create ...
    (microsoft.public.windowsxp.general)
  • Re: Problem adding a new Domain Controller
    ... Error message when you run the Active Directory Installation Wizard: ... How to upgrade Windows Server 2003 with Service Pack 1 to Windows Server ... source forest is not compatible with the version of Active Directory on this ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows 2003 DNS uppgrade
    ... > windows 2003 i would prefer to do a clean install. ... Windows Server 2003 Upgrade Assistance Center: ... New Active Directory Features in Windows Server 2003, ...
    (microsoft.public.win2000.dns)
  • RE: yet another NT4.0 to 2003 migration; which strategy to choose
    ... If you prefer to use Domain rename Tool, ... first migrate users, groups, computer objects and security from Windows NT ... new Active Directory domain for authentication. ... Now you can migrate the WINS, DNS and DHCP services to Windows Server 2003 ...
    (microsoft.public.windows.server.migration)
  • RE: Installing New Instances of Windows 2003 Server and placing Windows 2000 Server
    ... Tge following are some documents for upgrading / migrating Windows 2000 to ... 325379 How to Upgrade Windows 2000 Domain Controllers to Windows Server 2003 ... Install Active Directory on Windows Server 2003-Based Member Servers ...
    (microsoft.public.windows.server.migration)