Re: Edit MS Active Directory

Joe's is about $35 and it is a very good book. The $600 will assist those
that have an understanding and a large environment. From what I see you
aren't clear on your environment so the $600 spent will not provide what you
need.

Buy Joe's book, it is worth it.

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup

This posting is provided "AS IS" with no warranties, and confers no rights.

<blog@xxxxxxxxxxxxx> wrote in message
news:1152057265.485204.260090@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi Alan

There is a solution out there that will really simplify this process
and provide you with more control of your network. I found this whilst
looking for software to backup Active Directory with ability to restore
single items like 1 account or even OU. I would recommed that you have
a look its called Active Administrator

http://www.download.com/Active-Administrator/3000-2651_4-10538587.html?tag=lst-0-2

Thanks
Anthony


Joe Richards [MVP] wrote:
Yes, you should first get an understanding of AD, see the book in the
signature of this message. Then once you understand the concepts of
delegation etc, then look at the Microsoft Delegation Whitepaper for
specific examples. Make sure you understand the lowlevel concepts first
though or else you will probably screw it up.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



alanf77@xxxxxxxxx wrote:
Hi

I am very new to the posting on the web; I am looking for some help
with security within out corp. network. We are looking to remove lot
permissions on office network and want to remove the admin permissions
to a lot of server.


What I need to do is to allow Helpdesk Team ability to logon and have
ability to create, change and reset user account password.

Is this possible?


Also is it possible to allow the Helpdesk group to modify current group
and User's permissions without them being assign as a domain admin?

Thanks in advance

Alan




.

Relevant Pages

  • Re: Edit MS Active Directory
    ... Systems Administrator ... Author of O'Reilly Active Directory Third Edition ... permissions on office network and want to remove the admin permissions ... What I need to do is to allow Helpdesk Team ability to logon and have ...
    (microsoft.public.windows.server.active_directory)
  • Re: Edit MS Active Directory
    ... and provide you with more control of your network. ... Author of O'Reilly Active Directory Third Edition ... permissions on office network and want to remove the admin permissions ... What I need to do is to allow Helpdesk Team ability to logon and have ...
    (microsoft.public.windows.server.active_directory)
  • Re: Race and IQ
    ... things, involves the ability to reason, plan, solve problems, ... designing a machine. ... There is no definitive answer to why IQ bell curves differ across ... Most experts believe that environment is ...
    (talk.origins)
  • Re: configuring multiple users in WinXP
    ... so that there is not a lot of permissions I can give or deny. ... >> environment of the newly created user was no longer the keyboard ... >> able to retrieve a normal basic configuration for keyboard International ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Auto-Enrollment of Certificates
    ... What I understood from your reply is that I need to have an Active Directory ... hiearchy then you would need to work with Verisign and deploy a Windows ... Server 2003 subordinate CA in your environment." ... certificates provides a quick and simple way to issue certificates to users ...
    (microsoft.public.platformsdk.security)