[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 150
  • Last Modified:

Group for site administartors

I'm looking to create a super user group for my site admin administrators. I need then to be able to restart print spoolers, set up machines, do general admin duties but I don't want them to have domain admin rights, What's the best permissions to give this group or does Windows have a default group just for this? Currently they all have domain access and i know this isnt the correct way to go as i dont want them looking anywhere and everywhere.
1 Solution
Use the delgation wizard in AD users and computers to delegate the roles you want youe SuperUser Group to have.
Right Click your domain name in AD Users and Computers and select Delegate control

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now