Domain Rights and policy

I want to set a policy that a security group has admin access to log into computers and manage an ou and email accounts (2010 exchange) but cannot make any domain changes, etc.  
Jack_son_Asked:
Who is Participating?
 
Mike KlineConnect With a Mentor Commented:
You can use restricted groups to add a group to the local admins of all PCs  Florian has a great article  http://www.frickelsoft.net/blog/?p=13

You can right click and delegate permissions to an OU (using delegation control wizard is one way)

You can delegate with E2K10...I haven't played with that much...being honest   http://technet.microsoft.com/en-us/library/dd351237.aspx

Thanks

Mike
0
 
Jack_son_Author Commented:
Okay thanks, I mean exchange 2007 not 2010
0
 
Jack_son_Author Commented:
also how do you assign the OU management permissions
0
 
Mike KlineConnect With a Mentor Commented:
There is no real "OU Manager" but you can delegate control (see screenshots)

Thanks

Mike
Delegate1.png
Delegate2.png
Delegate3.png
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.