Specific User and Group Security Rights

Ok I'm pretty sure it's possible, but not sure where to do it.

I have groups I created, and I want to give them nitty gritty security.

Example: Group A, has the right to add users to groups but not create groups.
Group B can edit certain user fields in the properties but not others.

Group C can only create accounts and reset passwords etc..

Where is this done at?
Who is Participating?
jmiller47Connect With a Mentor Commented:
You can use Delegation of control by right-clicking the OU and choosing Delegation of Control
What OS are you running?
fredmastroAuthor Commented:
Sorry, that would have helped! lol

Windows 2000 Domain, using Active Directory, that's where I want to edit the security.
Isn't this part of Group Policy?

Go into AD Users and Computers, right-click the domain, go to properties.  You can either edit an existing (default domain policy) or create a new one.  Within here there are different security sections.  For example, if you go to Computer Configuration, Windows Settings, Local Policies, you will see a few areas to set rights etc.  

I am by no means an expert in this area, but I believe GP is where its all at...
fredmastroAuthor Commented:
Yes I look in there but I can't find where I say say, "Can not create groups" sorta speak.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.