Solved

Access Rights

Posted on 2013-01-23
3
186 Views
Last Modified: 2013-02-01
Experts,

We have AD forest with a child domain. I'm one of the Admins and we are planning to hire 2 junior admins. I would like them to have limited access rights on the system. all i want them to do is add PCs to the domain, install apps on PCs etc. Nothing inside the servers. What is the best way to do this?

Also I would like to add an enterprise admin to all the workstations using a Group policy. Can we do this?

Thank you.
0
Comment
Question by:Sajith Silva
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
Sarang Tinguria earned 500 total points
ID: 38811004
Use restricted group as illustrated in below link for making enterprise admin
http://www.nixadmins.net/2009/10/21/using-restricted-groups-in-active-directory/

To allow Jr admins to install software on Client machine they should be local admins
Read below links on how delegate comman tasks to Jr Administrators

Active Directory rights delegation – overview « iSiek's blog about ...
http://kpytko.wordpress.com/2012/05/16/active-directory-rights-delegation-overview/

Active Directory rights delegation – part 2 « iSiek's blog about ...
http://kpytko.wordpress.com/2012/05/26/active-directory-rights-delegation-part-2/
0
 

Author Comment

by:Sajith Silva
ID: 38839765
Thank you for all this. I did the first part of your answer but unfortunately it has not updated the local users inside the workstations. what could be the reason? i followed the exact steps.
0
 

Author Comment

by:Sajith Silva
ID: 38843646
managed to fix it. i have created the GP in the different location.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question