Solved

Assigning certain privilages

Posted on 2004-09-25
1
186 Views
Last Modified: 2013-12-04
I have a windows 2000 server.  Actually I have many of them.  I have a help desk.  Now the help desk has almost domain admin rights.  I have users that forget their password a lot so we let the help desk unlock them and reset their password and all.  I also have a group of about 355 people that have the same rights as the helpdesk.  Except when they lock themselves out the help desk can not unlock them and they have to call me and my 5 man team.  Is there a way I can give the help desk permission to unlock all type of accounts without giving them domain admins?

Thanks
John
0
Comment
Question by:John Sheehy
1 Comment
 
LVL 82

Accepted Solution

by:
oBdA earned 350 total points
ID: 12150587
You can give them only the basic permissions they need, and even give them a customized MMC task pad that doesn't leave much room for errand clicks; check out these articles:

HOW TO: Delegate Administrative Authority in Windows 2000
http://support.microsoft.com/?kbid=315676

HOW TO: Create and Edit a Taskpad View in a Saved MMC Console in Windows 2000
http://support.microsoft.com/?kbid=321143

Default Security Concerns in Active Directory Delegation
http://support.microsoft.com/?kbid=235531

Delegate Control Wizard Cannot Be Used to Remove Groups or Users
http://support.microsoft.com/?kbid=229873

Administrative Tool Menu Is Sensitive to User's Permissions
http://support.microsoft.com/?kbid=214739

Active Directory Database Size and Delegation Access Rights
http://support.microsoft.com/?kbid=197054

How To Delegate the Unlock Account Right
http://support.microsoft.com/?kbid=294952
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now