• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 205
  • Last Modified:

Best account group

I would like to create an account with minimum permission on a Windows 2003 Domain Controller, not being able to install programs or change services, but yet being able to login on the server and create accounts and add them to Domain Users group, or reset their passwords.
Which is the most appropriate option?
1 Solution
Possibly "Account Operators Group"

Good article on this : http://www.windowsecurity.com/articles/Built-in-Groups-Delegation.html
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now