Perms

[Mark Berretta]

Hi,

I am in an active directory environment. I need to give a few users the
ability to add security permissions to folders. What is the best way to do
this? Should I create a group called teachers then add account operators to
teachers. Then give teachers full permissions to the folders? Now that they
are Account Operators does this mean they can delete accounts? Did I just
open the door for them to destroy AD?

Thanks,
Mark

 

[Joe Griffin [MSFT]]

Hello Mark,
It sounds like this article will assist you.
http://support.microsoft.com/default.aspx?scid=KB;EN-US;277644

Joe Griffin [MS]
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Mark Berretta]

What I did to fix my problem is give the user full control of the folder and
they can add or remove users as needed. The user does it from their XP
machines.

Thanks,

Hello Mark,
It sounds like this article will assist you.
http://support.microsoft.com/default.aspx?scid=KB;EN-US;277644

Joe Griffin [MS]
This posting is provided "AS IS" with no warranties, and confers no

rights.

 

[Guest]

lkjlkj

 

[Chris]

Make another security group that these users are a part of.
Give this security group the rights on the folders to
change permissions. I wouldn't start adding regular users
into groups that have more power than just what you need to
give them. And, yeah, if they are a part of the Account
Operators group then they can destroy accounts.

Chris

 

[Mark Berretta]

Thanks, that is what I needed.

Make another security group that these users are a part of.
Give this security group the rights on the folders to
change permissions. I wouldn't start adding regular users
into groups that have more power than just what you need to
give them. And, yeah, if they are a part of the Account
Operators group then they can destroy accounts.

Chris