• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 129
  • Last Modified:

Can you modify the built-in accounts in windows2000 server

Hi all,

We're wanting to modify the built-in "Account Operators" in AD users and computers.  Is this possible?

We have a new user who's going to be doing low level support stuff and we don't want her to have Domain Admin rights.  

We want her to have the ability to administer user accounts, bring up a remote session to PDC with her user name, connect to client's pc via UNC (\\pc\c$).  I'm thinking that she won't be able to connect to client's pc with her login unless she's domain admin.

If you could please advise.

Thanks
0
cooljam23
Asked:
cooljam23
  • 2
1 Solution
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
I would suggest looking into how to properly create organizational units and delegate control.  Here's some links:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/DepKit/1079c1ad-08ee-4429-88ee-1d287ab11b1d.mspx
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
I disagree.  Based on the user's requirements, delegating control through OUs and proper placement of users in such OUs should be sufficient.  If you would prefer NOT accepting my comment as answer, I'll live with that, but the author NEVER responded to the comment and I'm inclined to suggest a PAQ/No Refund before a Delete/Refund.
0

Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now