Re: Delegation of Control



try copying dsa.msc to your users workstations

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Steve" <Steve@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DD36E8E0-1C54-44E2-81C3-F8F36B8DC0B5@xxxxxxxxxxxxxxxx
Hello,

Somewhat of a newbie here with Delegation of Control. I've ran the
delegation of control wizard and assiged the group of people that I want
setup to reset password for user accounts. Now comes the question; How do
I
give them access to active directory from a remote pc to make changes
without
installing the full blown administrative console? I have the
administrative
console for my pc that includes tools for "sites and services" and "active
directory domain and trusts" but I really dont want them to have all these
tools as an option. They are local administrators on there computer but I
only want them to have a shortcut to the active directory users and
computers
tool and only be able to make changes based on the delegation that I have
given them. Thanks in advance for any comments, solutions and suggestions.


.



Relevant Pages

  • Re: Delegation of Control
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... give them access to active directory from a remote pc to make changes ... They are local administrators on there computer but I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegation of Control
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... give them access to active directory from a remote pc to make changes ... They are local administrators on there computer but I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Grant Administrative Access to a Domain Controller
    ... MPerrault suggested security, you said "IT CAN BE DONE WITHOUT ANY FANCY ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ...
    (microsoft.public.windows.server.active_directory)
  • Re: Managing Domain workstations
    ... Always test ANY suggestion in a test environment before implementing! ... SMS will help you monitor what is being used if you so desire to waste countless hours snooping on others. ... MVP - Directory Services ... migrated onto it through active directory. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Managing Domain workstations
    ... If you have problem users have HR set down a policy of computer use and if it is violated there will be terms of punishment up to and including termination. ... SMS will help you monitor what is being used if you so desire to waste countless hours snooping on others. ... MVP - Directory Services ... migrated onto it through active directory. ...
    (microsoft.public.windows.server.active_directory)