Looking for info on ADUC Tools

Posted on 2011-09-08
Medium Priority
Last Modified: 2012-05-12
I have an issue where i need to give permission to a Supervisor to due password resets and also modify group membership. I do not want to give the full access to ADUC, not for trust reasons just for the lack of IT knowledge and the harm they could cause. So does any one know of a good program that wold allow this.
Question by:Kelly-Brady
  • 2
LVL 27

Accepted Solution

KenMcF earned 1000 total points
ID: 36506046
Why not just delegate the proper psrmissions neede to the OUs where the users and groups are located. You could also create a taskpad view to those OUs.



Author Comment

ID: 36506057
Would that not require me to put ADUC on there machines?
LVL 27

Expert Comment

ID: 36506083
Yes you can install the 2003 admin tools or the RSAT depending on the version of OS. But the user will only have rights that you delegate to the user or groups they are in. Not full access.

Featured Post

Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question