Helpdesk delegation for helpdesk level 1 - Win 2008 domain and Exchange 2003

Posted on 2011-10-07
Last Modified: 2012-05-12
I have two junior helpdesk guys, they should have access to do day to day maintenance on AD like creating and deleting users, changing group membership and changing settings on exchage mailboxes like permissions.

what is the best way of doing so ?
Question by:ifred
    LVL 57

    Expert Comment

    by:Mike Kline
    Take a look at the account operators group

    You can use delegation too but that group should meet most requirements


    LVL 6

    Expert Comment

    You can also create another group add the two junior techs to that group. Then you will have to create a gpo link it and modify the ACL to only give access for specific task. Ex. reset password, add/remove user. Things of that nature.

    Account operator might also work but with modifying the ACL you have more control of what you want them to have access to do.

    If you need a step by step let me know.

    LVL 24

    Accepted Solution

    Create a group like "helpdesk admins" then open Active Directory Users & Computers MMC snap-in right click on OU where you want them to give rights, if you want give them rights over whole domain then right click on domain name, select delegate control option.

    In the resulting wizard select the group you created earlier "helpdesk admins" click next then click Create a Custom Task to delegate then click next.Select which tasks the groups will be able to perform.

    Refernce link:


    Author Closing Comment

    The solution help me track a better way to control delegation.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Too many email signature updates to deal with?

    Are you constantly visiting users’ desks making changes to email signatures? Feel like it’s taking up all of your time? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

    Get an idea of what you should include in an email disclaimer with these Top 5 email disclaimer tips.
    Use these top 10 tips to master the art of email signature design. Create an email signature design that will easily wow recipients, promote your brand and highlight your professionalism.
    This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
    The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    7 Experts available now in Live!

    Get 1:1 Help Now