?
Solved

Limit users rights for administrator

Posted on 2004-08-24
4
Medium Priority
?
185 Views
Last Modified: 2010-04-19
I need to create a domain user account with admin rights to create users and add computers to the domain. What is the best practice or right way to do this.


Thanks
0
Comment
Question by:eenice96
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 15

Expert Comment

by:scampgb
ID: 11883925
Hi eenice96,

There's a builtin account group called "Account Operators". They are able to create and edit accounts on the domain.

Have you tried this?
0
 

Author Comment

by:eenice96
ID: 11884626
this will allow them to add/delete users and comuters? I have not tried this.
0
 
LVL 15

Accepted Solution

by:
scampgb earned 2000 total points
ID: 11885565
Hi

Yes - assuming that you've not changed any of the default permissions for the Account Operators group.

Bear in mind that there's an issue with Windows 2000 that allows Account Operators to change their own account settings (and make themselves Domain Admins!).  This is fixed with a service pack - more details at http://support.microsoft.com/default.aspx?kbid=327709
0
 
LVL 15

Expert Comment

by:scampgb
ID: 11896399
Hi.  Thanks for the "A".  Glad I could help :-)
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
In this video, Percona Solution Engineer Rick Golba discuss how (and why) you implement high availability in a database environment. To discuss how Percona Consulting can help with your design and architecture needs for your database and infrastr…
Suggested Courses

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question