Solved

Domain Accounts

Posted on 2013-10-25
4
231 Views
Last Modified: 2013-10-25
Does anyone have a good website to define the different user accounts with active directory and their permission levels?

Also I want to add a new user and give him local administrative rights to all desktops within the domain but no admin rights to the domain itself currently.  What type of user would I need to configure?
0
Comment
Question by:mgerwelAF
  • 2
4 Comments
 
LVL 6

Expert Comment

by:ButlerTechnology
ID: 39600144
I usually create a global group in AD called Workstation Admins.  The Workstation Admins group is a member of the Administrators group on each workstation.  You can leverage group policy's restricted group feature or preferences Local User and group to make this happen automatically.  I would recommend using the Preference option.

Tom
0
 

Author Comment

by:mgerwelAF
ID: 39600147
So would the users within the group 'Workstation Admins' be just regular users?
0
 
LVL 6

Accepted Solution

by:
vmdude earned 500 total points
ID: 39600164
Yes the users in the workstation admins group mentioned above would be just regular AD users. As long as the group is set to be Local Administrators on the computers (can be achieved via group policy) then thats all you need. No special AD permission required/
0
 

Author Closing Comment

by:mgerwelAF
ID: 39600189
Thanks for the info
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question