Solved

Limit users rights for administrator

Posted on 2004-08-24
4
182 Views
Last Modified: 2010-04-19
I need to create a domain user account with admin rights to create users and add computers to the domain. What is the best practice or right way to do this.


Thanks
0
Comment
Question by:eenice96
  • 3
4 Comments
 
LVL 15

Expert Comment

by:scampgb
ID: 11883925
Hi eenice96,

There's a builtin account group called "Account Operators". They are able to create and edit accounts on the domain.

Have you tried this?
0
 

Author Comment

by:eenice96
ID: 11884626
this will allow them to add/delete users and comuters? I have not tried this.
0
 
LVL 15

Accepted Solution

by:
scampgb earned 500 total points
ID: 11885565
Hi

Yes - assuming that you've not changed any of the default permissions for the Account Operators group.

Bear in mind that there's an issue with Windows 2000 that allows Account Operators to change their own account settings (and make themselves Domain Admins!).  This is fixed with a service pack - more details at http://support.microsoft.com/default.aspx?kbid=327709
0
 
LVL 15

Expert Comment

by:scampgb
ID: 11896399
Hi.  Thanks for the "A".  Glad I could help :-)
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Learn about cloud computing and its benefits for small business owners.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question