Delegatin Control does now work at Site.

Posted on 2004-11-17
Last Modified: 2010-04-14

I just recently added an additional domain controller at one of my remote sites, (SAME DOMAIN).  I populated an OU with Users, Printers and Computers (NO GROUPS).  And finally, delegated Control to a junior administrator to control "Reset Passwords only".

But when the junior administrator, logs on to the Domain Controller using his user ID and Password, he is still able to add users, printers and create OU's within his OU and all the others OU's within the Domain.    

What I am doing wrong?  I only want the Jr. Administrator to reset passwords for his OU only!

P.S.  Site replaication is working correctly.

Luis M. Rodriguez, MCP.
Question by:lrodriguez
    LVL 9

    Accepted Solution

    Take him out of the administrators group.....and add him to the list of users with permissions to log on locally.  If he is a member of the administrators group or domain admins, he will have full administrative privelages.  You need to keep him in Domain Users, give him local logon rights, then assign the policy setting to reset passwords.
    LVL 20

    Expert Comment

    Might be better to put him in his own security group, make that group member of domain users, do the rest that jamesreddy suggested and then use delegation of control to delegate to that security group. You can then just move him out and someone else in should you ever wish to.


    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Join & Write a Comment

    This post first appeared at Oracleinaction  ( Anju Garg (Myself). I  will demonstrate that undo for DML’s is stored both in undo tablespace and online redo logs. Then, we will analyze the reaso…
    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now