?
Solved

Elevate Authority

Posted on 2008-06-13
3
Medium Priority
?
243 Views
Last Modified: 2013-12-05
I have  anew employee startign and I want to grant him specific right on the domain and on computers in the network wiithout making him a doamin admin.  I want him to be allowed to install software, view all event logs, and unlock and reset users password in ADUC.  How can I accomplish this.  We are running a WIndows 2000 AD domian.
0
Comment
Question by:georgedschneider
1 Comment
 
LVL 2

Accepted Solution

by:
kunalclk earned 2000 total points
ID: 21781871
You can either make him a member of Account Operators Group in Domain or you can use the Delegate Control Option in AD. As for to install softwares on machine, give him the local administrator's password of all the computers. I believe it must be same across the organization. So that way you won't have to make him a Domain Admin.

Here is a useful link for understanding how delegation works:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/stepbystep/ctrlwiz.mspx
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After having deployed hundreds of thousands of Terminal Services seats worldwide, I still see all the time people asking me that same old question: "If TS/RDS is that reliable why are you telling me I should reboot it that often? My DC/SQL/Exchange/…
Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
Kernel Data Recovery is a renowned Data Recovery solution provider which offers wide range of softwares for both enterprise and home users with its cost-effective solutions. Let's have a quick overview of the journey and data recovery tools range he…
There may be issues when you are trying to access Outlook or send & receive emails or due to Outlook crash which leads to corrupt or damaged PST file. To eliminate the corruption from your PST file, you need to repair the corrupt Outlook PST file. U…

616 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question