Solved

Delegate Control for managing computer objects

Posted on 2007-11-27
2
2,713 Views
Last Modified: 2012-06-27
Hail!

I have this group called Helpdesk and I need to delegate control so they can:
1- Add a computer to the domain;
2- Remove a computer from the domain;
3- Rename a computer that already is on the domain. And this computer could be in any OU...


I think the best way of doing this is through th Delegation of control Wizard, but there are too many options and I don't want to give them too many power...

Thanks!
0
Comment
Question by:rafaelbn
2 Comments
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 75 total points
ID: 20360260
If you are saying that this group needs to be able to add and remove computers from any OU, then you can delegate permissions at the domain level.  Trying to remember the steps in the wizard off the top of my head:

1. Create a custom task to delegate
2. Select the HelpDesk group
3. Apply the task to computer objects only
4. Allow create and delete objects
5. Allow Read/Write of all properties
0
 

Author Comment

by:rafaelbn
ID: 20360525
Tkank you very much Laura!
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Synchronize a new Active Directory domain with an existing Office 365 tenant
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question