Re: How to grant security access to Help Desk?

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hello NUTZER,

Use restricted groups:
http://www.frickelsoft.net/blog/?p=13

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


All,

I finally got approved to get some help and hired a help desk
engineer. I don't want to give him "domain Admin" security access.
So I started delegate control to certain OU in ADCU&C. Now, my
question is by default, whenever we image a workstation, "domain
admin" is the Administrator of the workstation. How do I grant my new
Help Desk guy admin to all workstations in my domain without adding
him to the "domain admin" group.

Thanks!



.

Relevant Pages

  • Re: How to grant security access to Help Desk?
    ... Add it tot he Local Administrators group. ... I finally got approved to get some help and hired a help desk engineer. ... don't want to give him "domain Admin" security access. ... the workstation. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to grant security access to Help Desk?
    ... MVP Directory Services ... Now, my question is by default, whenever we image a workstation, "domain admin" is the Administrator of the workstation. ... How do I grant my new Help Desk guy admin to all workstations in my domain without adding him to the "domain admin" group. ...
    (microsoft.public.windows.server.active_directory)
  • How to grant security access to Help Desk?
    ... I finally got approved to get some help and hired a help desk engineer. ... don't want to give him "domain Admin" security access. ... whenever we image a workstation, "domain admin" is the Administrator of the ...
    (microsoft.public.windows.server.active_directory)
  • Re: users must be local admin but this means domain admin can be locked out
    ... and audit all workstation group membership from the domain instead of having ... > If you delete the domain admin from the machine, domain admin can login, ... Can modify the users and groups *that they have created.* ... operating system services or modify operating system files ...
    (microsoft.public.win2000.security)
  • Re: Cant install any software from a netwwork drive.
    ... domain admin has full control in the share permissions and the file ... I have a feeling this is something microsoft have done as a security measure ... the trouble of preventing us from launching executables from a mapped drive, ... Can you log on as a local workstation administrator on a workstation (not ...
    (microsoft.public.windows.server.general)