In
2Sweet said:
I only want to allow some key users to browse, unlock account, reset
password & disable account in Active Directory. No changes can be
made on the AD except those mentioned above. How to do it?
You would use the AD Delegation Wizard:
http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html
--
Regards,
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer
Infinite Diversities in Infinite Combinations
Having difficulty reading or finding responses to your post?
Try using Outlook Express or any other newsreader, configure a news
account, and point it to news.microsoft.com. Anonymous access. It's
easy and it's free:
How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164
"Life isn't like a box of chocolates or a bowl of cherries or
peaches... Life is more like a jar of jalapenos. What you do today
may burn your butt tomorrow." - Garfield
