group rights

  • Thread starter Thread starter Hutch
  • Start date Start date
H

Hutch

We are full AD.

We need to be able to create a group (or a user) that can
change passwords and unlock accounts but not have control
of groups. The account Operators group gives them access
to change groups. So thats not an option, unless you can
restrict that group from having access to modify groups.
Please help.

Thanks,
Hutch
 
Hello

Take a look at the Option Delegate Control you can use on each OU or at
domain level, Click that and you will see the Delegate Control Wizard apper,
there yoy can let users or groups to do some adminstrative tasks, you can
easy restrict them to what you want!

//Christoffer Andersson
 
Thanks, I'll give this a try.
-----Original Message-----
Hello

Take a look at the Option Delegate Control you can use on each OU or at
domain level, Click that and you will see the Delegate Control Wizard apper,
there yoy can let users or groups to do some adminstrative tasks, you can
easy restrict them to what you want!

//Christoffer Andersson




.
 
Back
Top