Set permission for a special user

[Savut]

How can I create a user so he has admin access to all workstation with a domain account, but he should not have access to modify the
active directory with terminal service or remote admini. tools.

Savut

 

[Richard Moreno]

Hi Savut-

I would recommend the use of Restricted Groups within Group Policy.

http://support.microsoft.com/default.aspx?scid=kb;en-us;228496

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

This posting is provided "AS IS" with no warranties, and confers no
rights.

How can I create a user so he has admin access to all workstation with a

domain account, but he should not have access to modify the

 

[Savut]

I found what you mean, but can't get it to work correctly, why are there lot of admin here for a group that dont have admin right,
and also, can you help me what should I do more precisely. I think I have to add Admin there for my custom group, but this person
should not modify the AD, how you set it ?

Savut

 

[Savut]

Ok my solution until I find a better one is create a group (wks-admin) and add this group on each workstation as local
administrator, then create the so so special user and put him on this group. Correct me or give me a better solution if you know
one, thanx all

Savut