• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 183
  • Last Modified:

create an AD account to add/modify users and DL in multiple domains

I need to create an account for a users to add/modify but don't want to give them domain admin rights. Is there an account or permissions for this?
0
CiscoAzn
Asked:
CiscoAzn
1 Solution
 
Adam BrownSr Solutions ArchitectCommented:
You can do this with delegation of authority or through the use of ACLs on Organizational units. http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=21678 has an indepth document concerning how to do this if you have time to read through it. But basically you just need to pick an OU that they can create objects in, right click it, and click Delegate Control. That will take you through the delegation wizard and let you define a specific level of access.
0
 
CiscoAznAuthor Commented:
Thanks for the help. We have multiple OU's and delegating to each one is tedious since this will be a poweruser that needs multiple access.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Amazon Web Services - Basic

Are you thinking about creating an Amazon Web Services account for your business? Not sure where to start? In this course you’ll get an overview of the history of AWS and take a tour of their user interface.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now