Re: User rights?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

KA Kueh <kka@xxxxxxxxxx> wrote:
Hi,

Thanks for the info. I will take a look. Thanks.

Regards,
Kueh.

You're welcome - good luck.


"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:e4s%23%23OtpIHA.4884@xxxxxxxxxxxxxxxxxxxxxxx
KA Kueh <KAKueh@xxxxxxxxxxx> wrote:
Dear all,

I need to allow one technical staff the ability to only manage users
account in my domain? What is the appropriate user
rights/permission that I should give for that the work? FYI, I do
not want to assign the user as Administrator or Administrator
group. thanks. Regards,
Kueh.

Use AD delegation. Rather than doing this for one user, I would
instead delegate rights to an AD security group (called "Helpdesk"
or something) and make the user a member of that group.
http://windowsitpro.com/article/articleid/45841/ad-delegation-eases-administration.html
may help you get started.

Then, if they have the admin tools on their workstation, you can set
up a custom MMC taskpad for them to do what they need, such as change
passwords, etc.

http://www.petri.co.il/create_taskpads_for_ad_operations.htm may
help.



.

Relevant Pages

  • XP users/file viewing
    ... I have the only administrator ... account and don't want to give my kids that much ability. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Administrator Account login disappeared
    ... > and everything through the second administrator account, ... > have the ability to also login as the original administrator too. ...
    (microsoft.public.windowsxp.security_admin)
  • more user account options?
    ... Administrator and Limited? ... If not is there any way to give a limited account user ... him the ability to do more that just the default. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Network Options--Missing Options
    ... Created a stub "Administrator" account with no ability. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... policy to rename the account although it is not really necessary or useful. ... Did I check Group Policies for references to the Administrator ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)