Active Director rights

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have a new employee who just came on baord. I want to gove him the abilty
to create news users, reset passwords, etc in AD. I want him to be able to
do this without giving him domain admin rights. How can I do this?
 
I have a new employee who just came on baord. I want to gove him the abilty
to create news users, reset passwords, etc in AD. I want him to be able to
do this without giving him domain admin rights. How can I do this?
Click to expand...

And don't forget Best Practices for Delegating Active Directory
Administration Appendices (http://www.microsoft.com/downloads/
details.aspx?FamilyID=29dbae88-a216-45f9-9739-
cb1fb22a0642&DisplayLang=en). It's also possible to do that with third-
party tools and, sometimes, in the more natural way. For example we
use desktop authority (http://www.scriptlogic.com) where the
delegation can be split-up on roles much like we split the roles for
servers. That helps for role distribution especially with new
administrators.
 
LOL

Another script logic shill.

This almost has me to the point of putting ScriptLogic sucks as my sig.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm
 
Back
Top