• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 353
  • Last Modified:

Delegate ability to add computers to domain but not delete

I would like to allow my technicians to add computers to the domain and update user information but I don't want them to be able to delete.  Haven't found a decent article on this.  Anywone have a good one on how to do this?
1 Solution
Use a group policy to assign local admin rights you can assign users to the local admins group of domain PC's via Group Policy.

I made a new GPO and named it local admin rights on desktops. In GPO settings goto Computer Config > Windows Settings > Security Settings > Restricted Groups. Add the domain group you want to be added to the local admin group and you're all set.

Don't forget to link the GPO to the correct OU / site /domain.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now