?
Solved

Delegate Control for managing computer objects

Posted on 2007-11-27
2
Medium Priority
?
2,721 Views
Last Modified: 2012-06-27
Hail!

I have this group called Helpdesk and I need to delegate control so they can:
1- Add a computer to the domain;
2- Remove a computer from the domain;
3- Rename a computer that already is on the domain. And this computer could be in any OU...


I think the best way of doing this is through th Delegation of control Wizard, but there are too many options and I don't want to give them too many power...

Thanks!
0
Comment
Question by:rafaelbn
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 300 total points
ID: 20360260
If you are saying that this group needs to be able to add and remove computers from any OU, then you can delegate permissions at the domain level.  Trying to remember the steps in the wizard off the top of my head:

1. Create a custom task to delegate
2. Select the HelpDesk group
3. Apply the task to computer objects only
4. Allow create and delete objects
5. Allow Read/Write of all properties
0
 

Author Comment

by:rafaelbn
ID: 20360525
Tkank you very much Laura!
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question