Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 271
  • Last Modified:

rights for a user

i have windows 2003 Domain, i don't want to give domain administrator password to any one in IT. I am searching how to create a domain user for IT guys that should have permission only to join clients machines to domain and install some software's not to have access on server's, Is there any way to that?
0
KhalidHabib
Asked:
KhalidHabib
  • 2
  • 2
2 Solutions
 
Darius GhassemCommented:
What you can do is create a group in AD then add this group to the local computers local admin group. You can do this all through a GPO.
0
 
tigermattCommented:

Create a group and add the users who should have this permission to the group. Then, grant the two permissions defined in 'Method 2' at http://support.microsoft.com/kb/251335 to allow the users to join computers to the domain.

If you want the users to have Administrator privileges on computers, you can use Restricted Groups to push this change to all workstations, again adding the freshly created domain security group into the Restricted Groups policy called 'Administrators'. http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

-tigermatt
0
 
Darius GhassemCommented:
0
 
KhalidHabibAuthor Commented:
Is there any easy solution, like createing an Admin user and then apply restrictions on it
0
 
tigermattCommented:

No. The methods we have posted, are the easiest ways of going about doing this. You MUST use Restricted Groups to grant the users the Administrator rights on PCs, and the Microsoft KB article to grant the group unlimited rights to join PCs to the domain.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now