AD Delegate Control

Hi Experts,

I would like to delegate some admin rights to a user.
I want the user to be able to fully administer user accounts, some OUs, join PCs to the domain but nothing else. How can i do this?


Who is Participating?
Mike KlineConnect With a Mentor Commented:
You could use the builtin account operators group or delegate the rights using the delegation wizard  (or modify ACLs directly)

You can use group policy to let them add computers to the domain

Under Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment
 "Add workstations to domain"


Rio_10Author Commented:
This is great thanks.

I want to give a particular user RO access to DHCP. I have added the user to DHCP users group but i want the user to use RSAT and not login to the DHCP server directly.
when the user opens the DHCP console via RSAT I get an error that the DHCP service is not running on the target computer.

any ideas?
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.