Delegation issue

Hi group,

I am looking to delegate few of the activities like resetting passwords
and unlocking the accounts etc to the helpdek folks. I guess this can
be done with delegation wizard.
But at the same time i want to ensure that they dont have the rights to
change the folder/files permissions and shutdown the server system. Is
there any way i can possibly acheive this ?

Any inputs will be of great help.

Thanks,
John

.

Relevant Pages

  • Re: Account Operators accessing other account operators
    ... Once you are done with that you should move to fully delegated accounts where the exact permissions needed are delegated. ... group and delegate the correct permissions on an OU that applies to the correct objects in that OU. ... the Microsoft Windows domain controller that has the primary domain controller emulator operations master role verifies the ACLs on members of these administrative groups and compares them to the ACL on the AdminSDHolder object. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Permissions to join machine to domain
    ... I'm looking for just a list of ACL/ACE permissions to allow only joining to ... I want to delegate the following control to a group. ... Locked User Accounts: ... 294777 - How to Delegate Group Policy Control to users in Trusted Domain: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Administrator Accounts
    ... Computers can backup and restore domain controllers. ... the domain or you can delegate authority to create users/computer accounts ... and reset passwords for all but privileged group members. ... When you delegate for the domain/OU you can use standard or create ...
    (microsoft.public.security)
  • Re: Security question
    ... When you delegate permissions to manage user accounts, ... the users in the group that were delegate the permission can not manage each ... the Account Operator as well as the domain admin group will ...
    (microsoft.public.win2000.security)
  • Re: Security question
    ... When you delegate permissions to manage user accounts, ... the users in the group that were delegate the permission can not manage each ... the Account Operator as well as the domain admin group will ...
    (microsoft.public.windows.server.security)