group permissions

  • Thread starter Thread starter Javier
  • Start date Start date
J

Javier

I'd like to grant our field techs the right to logon to a machine that
is a member of our domain and reset an account that lives on the local
machine without granting the field techs admin privlages withinthe
domain. Is there domain group that will allow this?

Javier
 
No, you need to add them to the local administrators group of the member
machine. If this "local machine" is a DC then you can't do it at all.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm
 
Back
Top