Junior Admin

  • Thread starter Thread starter eric
  • Start date Start date
E

eric

We want to create a group of "junior admins" and allow
them to reset passwords and pretty much nothing else. I
create a group and put members in it, then I created a
MMC with just to OU and its children in it for "junior
admins". I then used the delegate wizard and added this
group to change and reset passwords group. My question
is, where are these permissions being applies, what do I
do if in 6 weeks I want to revoke this authority? Where
is this being set?
..
 
They would only be able to use that delegated right on users in that OU that are not
also in the administrators group or other elevated groups. If you want to remove that
permission, you will have to go into the security properties for that OU, find it,
and delete it. You probably will find the entry in advanced/special permissions. --
Steve
 
Back
Top