Solved

Delegate Control for managing computer objects

Posted on 2007-11-27
2
2,719 Views
Last Modified: 2012-06-27
Hail!

I have this group called Helpdesk and I need to delegate control so they can:
1- Add a computer to the domain;
2- Remove a computer from the domain;
3- Rename a computer that already is on the domain. And this computer could be in any OU...


I think the best way of doing this is through th Delegation of control Wizard, but there are too many options and I don't want to give them too many power...

Thanks!
0
Comment
Question by:rafaelbn
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 75 total points
ID: 20360260
If you are saying that this group needs to be able to add and remove computers from any OU, then you can delegate permissions at the domain level.  Trying to remember the steps in the wizard off the top of my head:

1. Create a custom task to delegate
2. Select the HelpDesk group
3. Apply the task to computer objects only
4. Allow create and delete objects
5. Allow Read/Write of all properties
0
 

Author Comment

by:rafaelbn
ID: 20360525
Tkank you very much Laura!
0

Featured Post

Enroll in June's Course of the Month

June's Course of the Month is now available! Every 10 seconds, a consumer gets hit with ransomware. Refresh your knowledge of ransomware best practices by enrolling in this month's complimentary course for Premium Members, Team Accounts, and Qualified Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question