Limit users rights for administrator

I need to create a domain user account with admin rights to create users and add computers to the domain. What is the best practice or right way to do this.


Thanks
eenice96Asked:
Who is Participating?
 
scampgbConnect With a Mentor Commented:
Hi

Yes - assuming that you've not changed any of the default permissions for the Account Operators group.

Bear in mind that there's an issue with Windows 2000 that allows Account Operators to change their own account settings (and make themselves Domain Admins!).  This is fixed with a service pack - more details at http://support.microsoft.com/default.aspx?kbid=327709
0
 
scampgbCommented:
Hi eenice96,

There's a builtin account group called "Account Operators". They are able to create and edit accounts on the domain.

Have you tried this?
0
 
eenice96Author Commented:
this will allow them to add/delete users and comuters? I have not tried this.
0
 
scampgbCommented:
Hi.  Thanks for the "A".  Glad I could help :-)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.