Solved

Delegating admin rights

Posted on 2013-11-25

3 solutions

396 Views

Last Modified: 2013-12-08

Hi,

I want to delegate permission for a new system administrator to manage below tasks:

1. User password change (windows 2008 DC)
2. Create/ manage new mailbox (exchange 2010)
3. Change user property

How I can provide these permissions to a user called itsupport

regds

Comment

Question by:kolathaya123

[X]

Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

Help others & share knowledge
Earn cash & points
Learn & ask questions

Join The Community

3 Comments

LVL 24

Assisted Solution

by:Sandeshdubey

Sandeshdubey earned 166 total points

ID: 396767662013-11-25

You need to delegate control for above activity

For reset password see this:http://www.petri.co.il/delegate-permission-reset-ad-user-account-passwords.htm

Create/ manage new mailbox
http://social.technet.microsoft.com/Forums/windowsserver/en-US/5a8aa60f-0a22-44e3-ada5-d3c696087bb3/delegate-control-in-ad

How to Delegate Basic Server Administration To Junior Administrators http://support.microsoft.com/kb/555986

Best Practices for Delegating Active Directory Administration http://www.microsoft.com/en-us/download/details.aspx?

Step-by-Step Guide to Using the Delegation of Control Wizard
http://www.activewin.com/win2000/step_by_step/active_directory/delegsteps.shtml

LVL 9

Assisted Solution

by:VirastaR

VirastaR earned 167 total points

ID: 396775172013-11-26

Hi,

Check this

Here is the Step by step procedure with Screenshots

Active Directory rights delegation – overview
http://kpytko.pl/2012/05/16/active-directory-rights-delegation-overview/

and

How to delegate password reset permissions for your IT staff
http://community.spiceworks.com/how_to/show/1464-how-to-delegate-password-reset-permissions-for-your-it-staff

Hope that helps :)

LVL 2

Accepted Solution

by:daniel0

daniel0 earned 167 total points

ID: 396860182013-11-29

1. User password change (windows 2008 DC)

http://www.lostwindowspassword.com/reset-windows-server-2008-dc-password.html

2. Create/ manage new mailbox (exchange 2010)

The Mailbox Management Policy is a discontinued feature. You might find what you need in the new features section on Microsoft's site here.

http://technet.microsoft.com/en-us/library/dd298136.aspx

http://technet.microsoft.com/en-us/library/bb123720(v=exchg.141).aspx

3. Change user property

http://stackoverflow.com/questions/2184692/updating-active-directory-user-properties-in-active-directory-using-powershell

Hope it helps.

Featured Post

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to use User Attributes within Group Policy Preferences Item Level Filtering

Article by: Shaun

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.

Security updates for Microsoft End of Life operating systems..

Article by: Andrew

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP, Windows Server…

How to change priority of transport agents in Exchange 2007/2010 using Exchange Management Shell

Video by: CodeTwo

Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

Mass Updating Active Directory From a Text File

Video by: Kevin

This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.