Limited domain admin account?
Posted on 2010-09-03
I'd like to create an account for a junior admin person but would only like to give him access to reset account passwords, reset account lockouts, etc... but would not want to use a domain admin account. What's the best method/way to provision such an account? I don't want to give the admin too much permissions, but just enough to provide helpdesk password reset ability.