Windows 2008 Permissions

I would like to be able to give a user the ability to Add/modify users in active directory (basic modifications olny)  Also to be able to create security/distribution groups.  Is there a way to only allow this level of access or is there any free software that could allow this.
LVL 3
Kevin RobinsonPrivate VB.NET ContractorAsked:
Who is Participating?
 
Sushil SonawaneConnect With a Mentor Commented:
Try ADManager Plus from the manageengine it is avail free trail version.

(http://www.manageengine.com/products/ad-manager/index.html)

(http://www.manageengine.com/products/ad-manager/download.html)
0
 
awawadaCommented:
Yes you can. No need for 3rd Party Tools:
http://technet.microsoft.com/en-us/library/cc754542.aspx
0
 
bill_lynchConnect With a Mentor Commented:
You can delegate permissions.  Please see this blurb:

http://serverfault.com/questions/87753/how-can-i-give-permissions-to-one-account-to-create-modify-delete-ou-in-active-d

Its for a specific OU but should give you the idea.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
awawadaCommented:
@bill_lynch
Why do you say the same again what I told?

@VolunteerDevelopmentAgency
Choose here the permissions you want to give:

how
You can also custom the permissions if you click Create a custom task to delegate
0
 
Kevin RobinsonPrivate VB.NET ContractorAuthor Commented:
All excellent solututions but ended up using manage engine software.  Thanks for all the responses.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.