Re: Given access to edit active directory
- From: "Ken Aldrich" <supportw@xxxxxxxxxxxxxxx>
- Date: Mon, 12 Jun 2006 17:08:52 -0500
And if we're mentioning third party tools to help with this, there is
DSRAZOR for Windows. Once you get the delegation part using the built-in
delegation wizard and instructions from Joe and Jorge, you are halfway
there.
Next you can create a custom applet for user creation. This would be a
customizable form based user creation window that allows you to let people
create users in a controlled manner. This would be from their workstation
and does not require that they install Microsoft's Admin tools on their
workstations. You can even include dropdowns selection boxes so that they
can choose from a list of departments for example.
Check it out at www.visualclick.com/?source=usercreate061206
--
Ken Aldrich
DSRAZOR for Windows
Visual Click Software, Inc.
www.visualclick.com
"Jerry G" <gglanert@xxxxxxxxxxxxxxx> wrote in message
news:1150125808.144387.147040@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
There is a solution out there that will really simplify this process,
AND provide you with the controls that can assure your delegations are
exactly how you want them. Check out Active Administrator by
ScriptLogic:
http://www.scriptlogic.com/products/activeadmin/
pbuzzby@xxxxxxxxx wrote:
Hi
We are tighing up permission on our office network and want to remove
the admin permissions to a lot of server.
What i need to do is allow an Actiove directory group to login to the
domain controller and ONLY have access to the magae active directory
panel and then only allow them to add new users.
Is this possible?
Also is it possibale to alow this group to modify current group and
users permissions without them being allowed to assign anyone as a
domain admin?
Thanks in advance
.
- References:
- Given access to edit active directory
- From: pbuzzby
- Re: Given access to edit active directory
- From: Jerry G
- Given access to edit active directory
- Prev by Date: Re: Computers/Users and OU structure
- Next by Date: Re: group policy question on workstation and terminal server for s
- Previous by thread: Re: Given access to edit active directory
- Next by thread: GPO Objects not available on the server
- Index(es):
Relevant Pages
|
