Delegate Control for managing computer objects

Hail!

I have this group called Helpdesk and I need to delegate control so they can:
1- Add a computer to the domain;
2- Remove a computer from the domain;
3- Rename a computer that already is on the domain. And this computer could be in any OU...


I think the best way of doing this is through th Delegation of control Wizard, but there are too many options and I don't want to give them too many power...

Thanks!
rafaelbnAsked:
Who is Participating?
 
LauraEHunterMVPConnect With a Mentor Commented:
If you are saying that this group needs to be able to add and remove computers from any OU, then you can delegate permissions at the domain level.  Trying to remember the steps in the wizard off the top of my head:

1. Create a custom task to delegate
2. Select the HelpDesk group
3. Apply the task to computer objects only
4. Allow create and delete objects
5. Allow Read/Write of all properties
0
 
rafaelbnAuthor Commented:
Tkank you very much Laura!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.