Solved

Assigning certain privilages

Posted on 2004-09-25
1
188 Views
Last Modified: 2013-12-04
I have a windows 2000 server.  Actually I have many of them.  I have a help desk.  Now the help desk has almost domain admin rights.  I have users that forget their password a lot so we let the help desk unlock them and reset their password and all.  I also have a group of about 355 people that have the same rights as the helpdesk.  Except when they lock themselves out the help desk can not unlock them and they have to call me and my 5 man team.  Is there a way I can give the help desk permission to unlock all type of accounts without giving them domain admins?

Thanks
John
0
Comment
Question by:John Sheehy
1 Comment
 
LVL 83

Accepted Solution

by:
oBdA earned 350 total points
ID: 12150587
You can give them only the basic permissions they need, and even give them a customized MMC task pad that doesn't leave much room for errand clicks; check out these articles:

HOW TO: Delegate Administrative Authority in Windows 2000
http://support.microsoft.com/?kbid=315676

HOW TO: Create and Edit a Taskpad View in a Saved MMC Console in Windows 2000
http://support.microsoft.com/?kbid=321143

Default Security Concerns in Active Directory Delegation
http://support.microsoft.com/?kbid=235531

Delegate Control Wizard Cannot Be Used to Remove Groups or Users
http://support.microsoft.com/?kbid=229873

Administrative Tool Menu Is Sensitive to User's Permissions
http://support.microsoft.com/?kbid=214739

Active Directory Database Size and Delegation Access Rights
http://support.microsoft.com/?kbid=197054

How To Delegate the Unlock Account Right
http://support.microsoft.com/?kbid=294952
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

775 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question