Delegate Junior Administrator on LAN

Hi all,

My company will be join some Junior Administrator and we are using W2K3 R2 x64 Std.
The problems is I have do some research on the OU delegate, but too many customer object name unknow what is it.

If make a Domain User, that not those Junior Admin join the Domain Admin Group and Enterprise Group.

How to make them full management the end user workstation such as installing software, reset PRinter Pooler etc?

What is the best way or the most general way that nowadays big company I.T. for delegate to the Junior Admin.

Thank you very much. And example, detail KB, docunment are welcome.

explorer1979Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike ThomasConsultantCommented:
Create a group called junior admins and set the security prmissions on the OU or OU's containing objects you want them to fully manage rather than using delegation.

0
explorer1979Author Commented:
Hi MojoTech,

You mean give them the full permission of the objects like "Computers"?

I don't want them manage the AD, OU, or make new share on the server, just want to they can do the support job better on the client workstation such as XP Pro, Vista, Win7 etc.
0
explorer1979Author Commented:
And how to give the manage to the OU containing objects?
0
explorer1979Author Commented:
Hi,

I find the good way to do that!!

If you are on the AD environment, with OU design & Group Policy, you can do by this way
Restricted Groups in the Group Policy to add or Administrator to the client workstation local Admin Group, this will give you that the remote site or who want to admin the workstation local that who have the admin login right/permission

See the resource here
http://support.microsoft.com/kb/320065
http://support.microsoft.com/kb/279301
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.