NT Domain and 2003 AD conversion

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Jon in a hurry (hurry_at_discussions.microsoft.com)
Date: 02/11/05 

Date: Thu, 10 Feb 2005 16:03:01 -0800

I am taking a NT4 Domain group of admins, adding them to the 2003 AD
structure. I want to give these admins the permissions to administer their
own issues, such as adding a new user, creating future computer names, and
resources, etc. In 2003 what should I do to make this work? I want to use
OU's to do this, since its a new good feature and well I figure might as
well. Should I first create an OU for the small group of users domain and
then make smaller OU units underneath, giving the admins the perms to control
all of it? Or should I use the Group Policy Creator Owners and put these
admins into this group?

Relevant Pages

  • Re: Delegating control to sites
    ... If you don't already have them, create OU's for each administrative unit ... can they administer DHCP on their site? ... Work out who the backup domain admins are when you are away ... I want to remove them from Domain Admins and delegate control over ...
    (microsoft.public.windows.server.active_directory)
  • User/Group Administration
    ... starting to make use of dedicated groups to administer the ... Desktop Support Admins, Hardware Admins, that ... via a deskside visit or via connecting in the MMC ... (high TCO), I was wondering if anyone had a cool script ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Domain Admin Share
    ... I believe that only the NT Domain Admins have that right by default. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Now I can administer the NT Domain but I still ... Domain Admins group to the NT Domain Admins group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: webbased email administration
    ... We're considering setting up an email service here and we need to give IT ... admins in various companies the ability to administer their own email ...
    (freebsd-questions)