Solved

Access Rights

Posted on 2013-01-23
3
188 Views
Last Modified: 2013-02-01
Experts,

We have AD forest with a child domain. I'm one of the Admins and we are planning to hire 2 junior admins. I would like them to have limited access rights on the system. all i want them to do is add PCs to the domain, install apps on PCs etc. Nothing inside the servers. What is the best way to do this?

Also I would like to add an enterprise admin to all the workstations using a Group policy. Can we do this?

Thank you.
0
Comment
Question by:Sajith Silva
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
Sarang Tinguria earned 500 total points
ID: 38811004
Use restricted group as illustrated in below link for making enterprise admin
http://www.nixadmins.net/2009/10/21/using-restricted-groups-in-active-directory/

To allow Jr admins to install software on Client machine they should be local admins
Read below links on how delegate comman tasks to Jr Administrators

Active Directory rights delegation – overview « iSiek's blog about ...
http://kpytko.wordpress.com/2012/05/16/active-directory-rights-delegation-overview/

Active Directory rights delegation – part 2 « iSiek's blog about ...
http://kpytko.wordpress.com/2012/05/26/active-directory-rights-delegation-part-2/
0
 

Author Comment

by:Sajith Silva
ID: 38839765
Thank you for all this. I did the first part of your answer but unfortunately it has not updated the local users inside the workstations. what could be the reason? i followed the exact steps.
0
 

Author Comment

by:Sajith Silva
ID: 38843646
managed to fix it. i have created the GP in the different location.
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question