Delegate Junior Administrator on LAN

Posted on 2010-04-04
Medium Priority
Last Modified: 2013-12-04
Hi all,

My company will be join some Junior Administrator and we are using W2K3 R2 x64 Std.
The problems is I have do some research on the OU delegate, but too many customer object name unknow what is it.

If make a Domain User, that not those Junior Admin join the Domain Admin Group and Enterprise Group.

How to make them full management the end user workstation such as installing software, reset PRinter Pooler etc?

What is the best way or the most general way that nowadays big company I.T. for delegate to the Junior Admin.

Thank you very much. And example, detail KB, docunment are welcome.

Question by:explorer1979
  • 3
LVL 24

Expert Comment

by:Mike Thomas
ID: 29687598
Create a group called junior admins and set the security prmissions on the OU or OU's containing objects you want them to fully manage rather than using delegation.


Author Comment

ID: 29799314
Hi MojoTech,

You mean give them the full permission of the objects like "Computers"?

I don't want them manage the AD, OU, or make new share on the server, just want to they can do the support job better on the client workstation such as XP Pro, Vista, Win7 etc.

Author Comment

ID: 29799389
And how to give the manage to the OU containing objects?

Accepted Solution

explorer1979 earned 0 total points
ID: 31961467

I find the good way to do that!!

If you are on the AD environment, with OU design & Group Policy, you can do by this way
Restricted Groups in the Group Policy to add or Administrator to the client workstation local Admin Group, this will give you that the remote site or who want to admin the workstation local that who have the admin login right/permission

See the resource here

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
An Incident response plan is an organized approach to addressing and managing an incident. The goal is to handle the situation in a way that limits damage and reduces recovery time and costs.
The video provides a quick and easy steps to migrate MBOX file to well known Outlook PST and Office 365. Besides this, it also supports and migrates more than 20 email clients of MBOX which include AppleMail, Opera, Thunderbird and SeaMonkey effortl…
In this video I will demonstrate how to set up Nine, which I now consider the best alternative email app to Touchdown.
Suggested Courses

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question