Re: Edit MS Active Directory

Yes, you should first get an understanding of AD, see the book in the signature of this message. Then once you understand the concepts of delegation etc, then look at the Microsoft Delegation Whitepaper for specific examples. Make sure you understand the lowlevel concepts first though or else you will probably screw it up.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



alanf77@xxxxxxxxx wrote:
Hi

I am very new to the posting on the web; I am looking for some help
with security within out corp. network. We are looking to remove lot
permissions on office network and want to remove the admin permissions
to a lot of server.


What I need to do is to allow Helpdesk Team ability to logon and have
ability to create, change and reset user account password.

Is this possible?


Also is it possible to allow the Helpdesk group to modify current group
and User's permissions without them being assign as a domain admin?

Thanks in advance

Alan

.

Relevant Pages

  • Edit MS Active Directory
    ... with security within out corp. network. ... permissions on office network and want to remove the admin permissions ... What I need to do is to allow Helpdesk Team ability to logon and have ... Also is it possible to allow the Helpdesk group to modify current group ...
    (microsoft.public.windows.server.active_directory)
  • Re: User Access Denied With DHCP Admin. Group?
    ... There are two main ways of delegating control in Active Directory - using ... permissions on the object or parent object. ... through the Delegation of Control Wizard or the Sites and Services advanced ...
    (microsoft.public.windows.server.active_directory)
  • Re: Custom rights
    ... Try giving user who is adding account View Only Exchange Administrator ... >> To add computers to the domain go to AD Users and Computers. ... you will have to manually configure permissions on that user object ... >>> Look into AD delegation, though you may need to do some custom ...
    (microsoft.public.win2000.security)
  • Re: can I use GPO for remote folder management?
    ... Default grant is to Adminsitrators, ... How to grant him a delegation on the membership? ... membership if they are still able to alter the permissions of the ...
    (microsoft.public.win2000.group_policy)
  • Re: Delegation Control Wizard is blank
    ... But I would also like TechSupport to access DNS & DHCP without having to ... Then run the Delegation Control Wizard ... ... group and grant that group the permissions you want on that group. ...
    (microsoft.public.windows.server.active_directory)
Loading