how to create a group in active directory that can create users

I want to create an active directory group. The group has certain permissions for a certain active directory folder. The folder contains user objects.

The group can create users, modify users, reset passwords, unlock users, enable and disable them. All these operations will only be allowed in that folder.

I don't want to use a pre-defined group.

Members of the group will not log onto the server directly. They will enter their credentials into an application and it will perform the operations on their behalf.

I've tried doing it myself but it did not work so I'd like total guidance in this.

Jason
smallmajAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
chadConnect With a Mentor Commented:
Hi smallmaj,
You could delegate control of an OU or the domain to the group that you create and add users to.
http://www.microsoft.com/technet/prodtechnol/windows2000serv/howto/delestep.mspx

If the users will not be on a server to do this, you will need to install the adminpak from the server cd on the client computers they will be working from.
Happy Trails!
KaBaaM
0
 
smallmajAuthor Commented:
This question is part of several. However, i can only move onto the next question when this one is answered.
0
All Courses

From novice to tech pro — start learning today.