?
Solved

Delegating admin rights

Posted on 2013-11-25
3
Medium Priority
?
430 Views
Last Modified: 2013-12-08
Hi,

I want to delegate permission for a new system administrator to manage below tasks:

1. User password change (windows 2008 DC)
2. Create/ manage new mailbox (exchange 2010)
3. Change user property

How I can provide these permissions to a user called itsupport

regds
0
Comment
Question by:kolathaya123
3 Comments
 
LVL 24

Assisted Solution

by:Sandeshdubey
Sandeshdubey earned 498 total points
ID: 39676766
You need to delegate control for above activity

For reset password see this:http://www.petri.co.il/delegate-permission-reset-ad-user-account-passwords.htm

Create/ manage new mailbox
http://social.technet.microsoft.com/Forums/windowsserver/en-US/5a8aa60f-0a22-44e3-ada5-d3c696087bb3/delegate-control-in-ad

How to Delegate Basic Server Administration To Junior Administrators  http://support.microsoft.com/kb/555986

Best Practices for Delegating Active Directory Administration  http://www.microsoft.com/en-us/download/details.aspx?

Step-by-Step Guide to Using the Delegation of Control Wizard
http://www.activewin.com/win2000/step_by_step/active_directory/delegsteps.shtml
0
 
LVL 9

Assisted Solution

by:VirastaR
VirastaR earned 501 total points
ID: 39677517
Hi,

Check this

Here is the Step by step procedure with Screenshots

Active Directory rights delegation – overview
http://kpytko.pl/2012/05/16/active-directory-rights-delegation-overview/

 and

How to delegate password reset permissions for your IT staff
http://community.spiceworks.com/how_to/show/1464-how-to-delegate-password-reset-permissions-for-your-it-staff

Hope that helps :)
0
 
LVL 2

Accepted Solution

by:
daniel0 earned 501 total points
ID: 39686018
1. User password change (windows 2008 DC)

http://www.lostwindowspassword.com/reset-windows-server-2008-dc-password.html

2. Create/ manage new mailbox (exchange 2010)

The Mailbox Management Policy is a discontinued feature. You might find what you need in the new features section on Microsoft's site here.

http://technet.microsoft.com/en-us/library/dd298136.aspx

http://technet.microsoft.com/en-us/library/bb123720(v=exchg.141).aspx

3. Change user property

http://stackoverflow.com/questions/2184692/updating-active-directory-user-properties-in-active-directory-using-powershell

Hope it helps.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I am posting this in case anyone runs into similar issues that I did, this may save you a lot of grief: Condition: 1. Your NetBIOS domain name contains an ampersand " & " character.  (e.g. AT&T) 2. You've tried to run any Microsoft installation…
Sometimes it necessary to set special permissions on user objects.  For instance when using a Blackberry server, the SendAs permission needs to be set. I see many admins struggle with the setting that permission only to see it disappear within a few…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Suggested Courses

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question