group permissions

[Javier]

I'd like to grant our field techs the right to logon to a machine that
is a member of our domain and reset an account that lives on the local
machine without granting the field techs admin privlages withinthe
domain. Is there domain group that will allow this?

Javier

 

[Joe Richards [MVP]]

No, you need to add them to the local administrators group of the member
machine. If this "local machine" is a DC then you can't do it at all.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

 

[Javier]

Thanks joe,

That's what I figured.

Javier