I am looking to create permissions for some NT Admins to Active Directory and for management of member servers. They will need limited functionality in AD that I believe will be handled mostly by Account Operators.
I also need them to be able to log into all servers in the domain. At this point we don't want to give them the full permissions given by Domain Admins or Administrators. I'm looking for ideas of how best to accomplish this. Can I delegate "log on locally" to a servers OU possibly to accomplish this? Any ideas or best practices are welcomed.
Start Free Trial
