Looking for info on ADUC Tools

I have an issue where i need to give permission to a Supervisor to due password resets and also modify group membership. I do not want to give the full access to ADUC, not for trust reasons just for the lack of IT knowledge and the harm they could cause. So does any one know of a good program that wold allow this.
Kelly-BradyAsked:
Who is Participating?
 
KenMcFConnect With a Mentor Commented:
Why not just delegate the proper psrmissions neede to the OUs where the users and groups are located. You could also create a taskpad view to those OUs.

http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html

http://www.petri.co.il/create_taskpads_for_ad_operations.htm
0
 
Kelly-BradyAuthor Commented:
Would that not require me to put ADUC on there machines?
0
 
KenMcFCommented:
Yes you can install the 2003 admin tools or the RSAT depending on the version of OS. But the user will only have rights that you delegate to the user or groups they are in. Not full access.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.