Allow a domain user to manage AD Users from their workstation?

Posted on 2011-04-21
Last Modified: 2012-05-11
The company has a 2008 SBS server. I am wondering if there is a way to allow 1 designated user to manage the domain user accounts from their workstation wihthout having to gain access to the server? I want them to be able to unlock acocunts, change passwords and modify distribution group members.

They are already doing RDP to the server from the workstation. I would like it if there were a shortcut on their workstation right to the AD users container.

Is this possible?
Question by:craignh

    Author Comment

    If it is possible what kind of permissions would the user need so they dont need to log in under admin account?
    LVL 17

    Expert Comment

    by:Sikhumbuzo Ntsada
    It is posible, just add the user as part of the "HelpServicesGroup" and istall admin tools on his/her PC. He will only be able to do minimal things.

    Author Comment

    Thanks but I dont see a help services group on the WIndows 2008 SBS server?
    LVL 25

    Accepted Solution

    Using ..ADUC

    Add a Delegation Permission -
    Create a Task pad if you want to limit the interface the user can see. -


    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
    I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
    This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now