Increased permissions for Jr Systems administrator in Windows Environment

Posted on 2012-09-13
Last Modified: 2012-10-01
I am currently the administrator for a 100 employee busineess runnig strictly Windows platform: Exchange, SQL, Server 2003/08 and WIndows XP/7.

Right now I have full admin rights and the remainder of the staff have standard user rights.

I plan on hiring a jr support tech, and I want to give him some elevated privilages, which I have never done.  Is there a best practice on this, or basic steps.  I want him to be able to add/remove computers to the domain, add/modify users to Active Directory, but I of course dont want to give him the administrator password.
Question by:Bekster
    1 Comment
    LVL 57

    Accepted Solution

    You could use delegation or use builtin groups.   In this case you can add him to account operators

    You can delegate adding machines too

    John has the two ways you do it here

    One is through group policy and the user rights assignment

    The other is the delegation

    Create a group called "addMachines" (just an example) and use one of the methods to give that group the rights



    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Suggested Solutions

    Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
    To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now