Solved

Elevate Authority

Posted on 2008-06-13
3
231 Views
Last Modified: 2013-12-05
I have  anew employee startign and I want to grant him specific right on the domain and on computers in the network wiithout making him a doamin admin.  I want him to be allowed to install software, view all event logs, and unlock and reset users password in ADUC.  How can I accomplish this.  We are running a WIndows 2000 AD domian.
0
Comment
Question by:georgedschneider
3 Comments
 
LVL 2

Accepted Solution

by:
kunalclk earned 500 total points
ID: 21781871
You can either make him a member of Account Operators Group in Domain or you can use the Delegate Control Option in AD. As for to install softwares on machine, give him the local administrator's password of all the computers. I believe it must be same across the organization. So that way you won't have to make him a Domain Admin.

Here is a useful link for understanding how delegation works:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/stepbystep/ctrlwiz.mspx
0

Featured Post

Being driven mad by email signature updates?

Having to make a change to your users’ email signatures, yet again? Feel like your head is going to explode? Rely on an Exclaimer email signature management solution to make the process simple!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The environment that this is running in is SCCM 2007 R2 running on a Windows 2008 R2 server. The PXE Distribution point is running on its own Windows 2008 R2 box. This is what Event viewer showed after trying to start the WDS service:  An erro…
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now