Solved

Admin rights needed for desktop personnel

Posted on 2004-10-07
4
281 Views
Last Modified: 2010-04-19
We removed the service desk personnel from the Domain Admins group. They no longer have admin rights on the servers. What is the easiest way I can give them these rights back without making them Domain Admins

0
Comment
Question by:RealBigTime
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 104

Expert Comment

by:Sembee
ID: 12253929
It will need a little legwork or some GP modifications...

Create a new group called "helpdesk" (or whatever).
Add the users to this new group.
Add the group to the local admin group on each of the workstations and servers. You can use GP to do this - otherwise you will have to visit each machine in turn.
You will have to do some more complex things with rights for the domain controllers - as they don't have a local admin group.

Simon.
0
 

Author Comment

by:RealBigTime
ID: 12254459
Okay... How do I do this with a GPO?
0
 
LVL 15

Expert Comment

by:plimpias
ID: 12255460
Just add them as a normal user. and go into the security settings of the local server..and go to the secuirty settings. find right to log on locally and add that user in. also you can use delegation on the server and delegate certain tasks to that user. that would probably be the easiest way. go open active directory user and computers. right click a OU and choose delegation...follow the wizard.
0
 
LVL 51

Accepted Solution

by:
Netman66 earned 500 total points
ID: 12270363
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question