Solved

Delegate Control for managing computer objects

Posted on 2007-11-27
2
2,702 Views
Last Modified: 2012-06-27
Hail!

I have this group called Helpdesk and I need to delegate control so they can:
1- Add a computer to the domain;
2- Remove a computer from the domain;
3- Rename a computer that already is on the domain. And this computer could be in any OU...


I think the best way of doing this is through th Delegation of control Wizard, but there are too many options and I don't want to give them too many power...

Thanks!
0
Comment
Question by:rafaelbn
2 Comments
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 75 total points
Comment Utility
If you are saying that this group needs to be able to add and remove computers from any OU, then you can delegate permissions at the domain level.  Trying to remember the steps in the wizard off the top of my head:

1. Create a custom task to delegate
2. Select the HelpDesk group
3. Apply the task to computer objects only
4. Allow create and delete objects
5. Allow Read/Write of all properties
0
 

Author Comment

by:rafaelbn
Comment Utility
Tkank you very much Laura!
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

My last post dealt with using group policy preferences to set file associations, a very handy usage for a GPP. Today I am going to share another cool GPP trick, this may be a specific scenario but I run into these situations frequently in my activit…
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now