Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 181
  • Last Modified:

create an AD account to add/modify users and DL in multiple domains

I need to create an account for a users to add/modify but don't want to give them domain admin rights. Is there an account or permissions for this?
0
CiscoAzn
Asked:
CiscoAzn
1 Solution
 
Adam BrownSr Solutions ArchitectCommented:
You can do this with delegation of authority or through the use of ACLs on Organizational units. http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=21678 has an indepth document concerning how to do this if you have time to read through it. But basically you just need to pick an OU that they can create objects in, right click it, and click Delegate Control. That will take you through the delegation wizard and let you define a specific level of access.
0
 
CiscoAznAuthor Commented:
Thanks for the help. We have multiple OU's and delegating to each one is tedious since this will be a poweruser that needs multiple access.
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now