We help IT Professionals succeed at work.

Best account group

huji
huji asked
on
Medium Priority
213 Views
Last Modified: 2010-04-18
Hello
I would like to create an account with minimum permission on a Windows 2003 Domain Controller, not being able to install programs or change services, but yet being able to login on the server and create accounts and add them to Domain Users group, or reset their passwords.
Which is the most appropriate option?
Comment
Watch Question

Commented:
Possibly "Account Operators Group"

Good article on this : http://www.windowsecurity.com/articles/Built-in-Groups-Delegation.html

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.