Re: User Permission - [WildPacket]

This user shouldn't be a member of any of the built-in groups. You should
create your own groups and delegate the necessary permissions to those
groups. You then add this user and other users to the necessary groups,
e.g. Create Users, Create Contacts, etc.

Take a look at the best practices guide for delegating active directory
administration whitepaper and its appendixes.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


.

Relevant Pages

  • Re: Different Sites - One Database ?
    ... Create one site and delegate the necessary permissions to the different ... permissions to the child sites to the respective domain admins. ... MVP SMS ...
    (microsoft.public.sms.setup)
  • Delegation: Move Computer accounts between OUs
    ... Can anyone give me a step-by-step to delegate the necessary permissions ... to a GG to move computer accounts between OUs? ... Prev by Date: ...
    (microsoft.public.windows.server.active_directory)
  • RE: Delegate the right to delegate...
    ... Delegate Administrative Authority in Windows 2000 ... Best Practices for Delegating Active Directory Administration ... > would like to give them the right to delegate rights to other groups at their ...
    (microsoft.public.windows.server.active_directory)