Re: Desktop Support Members / Active Directory

I don't think so. In order to manage AD's objects there is a built in
group called Account operators, or you can delegate more detailed
permissions.

http://technet2.microsoft.com/windowsserver/en/library/1631acad-ef34-4f77-9c2e-94a62f8846cf1033.mspx?mfr=true


For software installation purposes, your desktop team should be member
of local administrators group in every machine. You can do that using
group policies.

Best regards

LIR
.

Relevant Pages

  • Re: Limit user access in SBS2003
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on Exchange technical issues. ... |> delegated permissions from the parent container. ... |> To delegate the permissions to change user's title, phone number, fax, ...
    (microsoft.public.windows.server.sbs)
  • Re: Delgation of control above the OU grants additional rights which provide Full Control for the us
    ... NewAdmin goes to this web site and requests the change. ... When you allow a user to create an OU, that user is the> owner of that OU and hence can change permissions on the OU. ... >>- to delegate the ability to create, rename and delete Computers in>>the created OUs. ... >>NewAdmin delegates Full Control to BadUser over ...
    (microsoft.public.win2000.active_directory)
  • Re: Delgation of control above the OU grants additional rights which provide Full Control for the us
    ... NewAdmin goes to this web site and requests the change. ... When you allow a user to create an OU, that user is the> owner of that OU and hence can change permissions on the OU. ... >>- to delegate the ability to create, rename and delete Computers in>>the created OUs. ... >>NewAdmin delegates Full Control to BadUser over ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delgation of control above the OU grants additional rights which provide Full Control for the us
    ... NewAdmin goes to this web site and requests the change. ... When you allow a user to create an OU, that user is the> owner of that OU and hence can change permissions on the OU. ... >>- to delegate the ability to create, rename and delete Computers in>>the created OUs. ... >>NewAdmin delegates Full Control to BadUser over ...
    (microsoft.public.win2000.setup_deployment)
  • Re: Delgation of control above the OU grants additional rights which provide Full Control for the us
    ... NewAdmin goes to this web site and requests the change. ... When you allow a user to create an OU, that user is the> owner of that OU and hence can change permissions on the OU. ... >>- to delegate the ability to create, rename and delete Computers in>>the created OUs. ... >>NewAdmin delegates Full Control to BadUser over ...
    (microsoft.public.win2000.security)