Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Domain Accounts

Posted on 2013-10-25
4
Medium Priority
?
239 Views
Last Modified: 2013-10-25
Does anyone have a good website to define the different user accounts with active directory and their permission levels?

Also I want to add a new user and give him local administrative rights to all desktops within the domain but no admin rights to the domain itself currently.  What type of user would I need to configure?
0
Comment
Question by:mgerwelAF
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 6

Expert Comment

by:ButlerTechnology
ID: 39600144
I usually create a global group in AD called Workstation Admins.  The Workstation Admins group is a member of the Administrators group on each workstation.  You can leverage group policy's restricted group feature or preferences Local User and group to make this happen automatically.  I would recommend using the Preference option.

Tom
0
 

Author Comment

by:mgerwelAF
ID: 39600147
So would the users within the group 'Workstation Admins' be just regular users?
0
 
LVL 6

Accepted Solution

by:
vmdude earned 2000 total points
ID: 39600164
Yes the users in the workstation admins group mentioned above would be just regular AD users. As long as the group is set to be Local Administrators on the computers (can be achieved via group policy) then thats all you need. No special AD permission required/
0
 

Author Closing Comment

by:mgerwelAF
ID: 39600189
Thanks for the info
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question