Hi
Have created an OU for our branch office. Have delegated control to the
local admin, so he can create users and groups, reset passwords, add
computers to domain.
Some problems...
1) Where and how can I see what rights I have delegated to him?
2) He cannot create computer or printer objects. What do I have to do to
give him these rights
3) If DomainAdmin create computers in the branch OU the local admin does not
see them (maybe the answer to 2 is also the solution to 3)
4) I suppose I cannot remove read rights for other objects in the AD?
Re: Granting Domain Users Local Admin Rights ... login is added to the local PC with administrator rights.... haven't been added as a local admin for local admin rights are ... Add the Interactive Users group as to the local admin group...conference room computers and training room computers usually include ... (microsoft.public.windowsxp.security_admin)
Re: Allowing Remote Admin Some Control ... In AD Users and Computers, go to the View Menu and click Advanced Features ... Now if you right click the OU you delegated control and go to properties, ... >> click on the Seattle OU in AD Users and Computers, ... >> Also set the computer startup scripts to run invisible so users don't see ... (microsoft.public.windows.server.general)
Re: SBS2003 Client Setup Wizard Problem ... I WAS NOT happy with adding users to the local admin group even for first ... they will ask for User Account Control for permission to connect to the domain. ... this user will be added to local admin user group on the client computers.... (microsoft.public.windows.server.sbs)
Re: Remote Access Help! ... The Branch office has two computers connecting now ... using GotoMyPC to two computers at the Main office. ... PC10 192.168.19.10 Port 19010 ... (microsoft.public.windows.server.general)
Re: Domain account - rights to install apps on all workstation in ... And when you say "all computers" hopefully you mean NON-DCs ... account to the local Admin group?... You can use Restricted Groups in a GPO for actually putting a domain ... group in the local Administrators groups of the computers. ... (microsoft.public.windows.server.active_directory)
