Solved

Delegating admin rights

Posted on 2013-11-25
3
383 Views
Last Modified: 2013-12-08
Hi,

I want to delegate permission for a new system administrator to manage below tasks:

1. User password change (windows 2008 DC)
2. Create/ manage new mailbox (exchange 2010)
3. Change user property

How I can provide these permissions to a user called itsupport

regds
0
Comment
Question by:kolathaya123
3 Comments
 
LVL 24

Assisted Solution

by:Sandeshdubey
Sandeshdubey earned 166 total points
ID: 39676766
You need to delegate control for above activity

For reset password see this:http://www.petri.co.il/delegate-permission-reset-ad-user-account-passwords.htm

Create/ manage new mailbox
http://social.technet.microsoft.com/Forums/windowsserver/en-US/5a8aa60f-0a22-44e3-ada5-d3c696087bb3/delegate-control-in-ad

How to Delegate Basic Server Administration To Junior Administrators  http://support.microsoft.com/kb/555986

Best Practices for Delegating Active Directory Administration  http://www.microsoft.com/en-us/download/details.aspx?

Step-by-Step Guide to Using the Delegation of Control Wizard
http://www.activewin.com/win2000/step_by_step/active_directory/delegsteps.shtml
0
 
LVL 9

Assisted Solution

by:VirastaR
VirastaR earned 167 total points
ID: 39677517
Hi,

Check this

Here is the Step by step procedure with Screenshots

Active Directory rights delegation – overview
http://kpytko.pl/2012/05/16/active-directory-rights-delegation-overview/

 and

How to delegate password reset permissions for your IT staff
http://community.spiceworks.com/how_to/show/1464-how-to-delegate-password-reset-permissions-for-your-it-staff

Hope that helps :)
0
 
LVL 2

Accepted Solution

by:
daniel0 earned 167 total points
ID: 39686018
1. User password change (windows 2008 DC)

http://www.lostwindowspassword.com/reset-windows-server-2008-dc-password.html

2. Create/ manage new mailbox (exchange 2010)

The Mailbox Management Policy is a discontinued feature. You might find what you need in the new features section on Microsoft's site here.

http://technet.microsoft.com/en-us/library/dd298136.aspx

http://technet.microsoft.com/en-us/library/bb123720(v=exchg.141).aspx

3. Change user property

http://stackoverflow.com/questions/2184692/updating-active-directory-user-properties-in-active-directory-using-powershell

Hope it helps.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question