We help IT Professionals succeed at work.

Allow a domain user to manage AD Users from their workstation?

667 Views
Last Modified: 2012-05-11
The company has a 2008 SBS server. I am wondering if there is a way to allow 1 designated user to manage the domain user accounts from their workstation wihthout having to gain access to the server? I want them to be able to unlock acocunts, change passwords and modify distribution group members.

They are already doing RDP to the server from the workstation. I would like it if there were a shortcut on their workstation right to the AD users container.

Is this possible?
Comment
Watch Question

Author

Commented:
If it is possible what kind of permissions would the user need so they dont need to log in under admin account?
Sikhumbuzo NtsadaIT Administration

Commented:
It is posible, just add the user as part of the "HelpServicesGroup" and istall admin tools on his/her PC. He will only be able to do minimal things.

Author

Commented:
Thanks but I dont see a help services group on the WIndows 2008 SBS server?
Information Services Manager
CERTIFIED EXPERT
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.