Given access to edit active directory

Hi

We are tighing up permission on our office network and want to remove
the admin permissions to a lot of server.

What i need to do is allow an Actiove directory group to login to the
domain controller and ONLY have access to the magae active directory
panel and then only allow them to add new users.

Is this possible?

Also is it possibale to alow this group to modify current group and
users permissions without them being allowed to assign anyone as a
domain admin?


Thanks in advance

.

Relevant Pages

  • Re: Given access to edit active directory
    ... the admin permissions to a lot of server. ... What i need to do is allow an Actiove directory group to login to the ... domain controller and ONLY have access to the magae active directory ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to go from 2 secure MDBs with 1 workgroup to 2 workgroups
    ... I'm running into is that the users who have admin permissions are given ... new user accounts and assign them to the appropriate group (for permissions). ... workgroup file for both applications, means they can assign any available ... workgroup file) can have administrative permissions in MDB_1 and yet not ...
    (microsoft.public.access.security)
  • Re: Given access to edit active directory
    ... AND provide you with the controls that can assure your delegations are ... the admin permissions to a lot of server. ... domain controller and ONLY have access to the magae active directory ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to go from 2 secure MDBs with 1 workgroup to 2 workgroups
    ... Blow has admin permissions in secureapp1.mdb and no permissions in ... the same workgroup file I don't see how you can prevent an admin user in one ... application from assigning himself admin permissions in the other ... All 3 database files were ...
    (microsoft.public.access.security)
  • Re: How to go from 2 secure MDBs with 1 workgroup to 2 workgroups
    ... permissions in secureapp2.mdb, what would prevent Joe from assigning ... himself admin permissions in the other application. ... workgroup file) can have administrative permissions in MDB_1 and yet not ...
    (microsoft.public.access.security)