Limit users rights for administrator

Posted on 2004-08-24
Medium Priority
Last Modified: 2010-04-19
I need to create a domain user account with admin rights to create users and add computers to the domain. What is the best practice or right way to do this.

Question by:eenice96
  • 3
LVL 15

Expert Comment

ID: 11883925
Hi eenice96,

There's a builtin account group called "Account Operators". They are able to create and edit accounts on the domain.

Have you tried this?

Author Comment

ID: 11884626
this will allow them to add/delete users and comuters? I have not tried this.
LVL 15

Accepted Solution

scampgb earned 2000 total points
ID: 11885565

Yes - assuming that you've not changed any of the default permissions for the Account Operators group.

Bear in mind that there's an issue with Windows 2000 that allows Account Operators to change their own account settings (and make themselves Domain Admins!).  This is fixed with a service pack - more details at http://support.microsoft.com/default.aspx?kbid=327709
LVL 15

Expert Comment

ID: 11896399
Hi.  Thanks for the "A".  Glad I could help :-)

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
How to fix display issue, screen flickering issue when I plug in power cord to the machine. Before I start explaining the solution lets check out once the issue how it looks like after I connect the power cord. most of you also have faced this…
This video tutorial shows you the steps to go through to set up what I believe to be the best email app on the android platform to read Exchange mail.  Get the app on your phone: The first step is to make sure you have the Samsung Email app on your …

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question