?
Solved

Domain Rights and policy

Posted on 2011-04-23
4
Medium Priority
?
258 Views
Last Modified: 2012-05-11
I want to set a policy that a security group has admin access to log into computers and manage an ou and email accounts (2010 exchange) but cannot make any domain changes, etc.  
0
Comment
Question by:Jack_son_
  • 2
  • 2
4 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 35453687
You can use restricted groups to add a group to the local admins of all PCs  Florian has a great article  http://www.frickelsoft.net/blog/?p=13

You can right click and delegate permissions to an OU (using delegation control wizard is one way)

You can delegate with E2K10...I haven't played with that much...being honest   http://technet.microsoft.com/en-us/library/dd351237.aspx

Thanks

Mike
0
 

Author Comment

by:Jack_son_
ID: 35453913
Okay thanks, I mean exchange 2007 not 2010
0
 

Author Comment

by:Jack_son_
ID: 35454318
also how do you assign the OU management permissions
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 2000 total points
ID: 35454457
There is no real "OU Manager" but you can delegate control (see screenshots)

Thanks

Mike
Delegate1.png
Delegate2.png
Delegate3.png
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Web hosting control panels were first developed to make it faster and easier for most users to set up and operate websites. The graphical user interface (GUI) allows users to perform tasks by pointing and clicking rather than typing highly specific…
Your business may be under attack from a silent enemy that is hard to detect. It works stealthily in the shadows to access and exploit your critical business information, sensitive confidential data and intellectual property, for commercial gain. T…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question