Which group can add OU's in active directory?

  • Thread starter Thread starter Bart
  • Start date Start date
B

Bart

I want to permit a group off users in the domain to add
organizational units (OU's) in active directory. This
group of users do not have administrative privileges and I
want to keep it that way. Does anyone know which group in
a Windows 2000 domain can add OU's in AD, besides
Administrator or a group that is a member off
Administrators?
I don't know if it's possible but any help is
appreciated...
 
Create a group called "OU Creators" or whatever you
like. Then give the group permission to create and
delete OUs. Here's the process: In Active Directory
Users and Computers, right-click your domain. Choose
properties. Click on the security tab. Click on
Advanced. Click Add. Find the group that you created
(OU Creators). Give them full control to "Create
Organizational Unit Objects" and "Delete Organizational
Unit Objects." That should do the trick. Oh, and don't
forget to add the users to the group.
 
Back
Top