Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2736
  • Last Modified:

Grant a single user access to edit a Global Security group?

Really easy question;

In AD, how can I grant a single user access to add/remove members a Global Security group? I have two groups that I want to allow him to edit.

Thanks
0
GCTTechs
Asked:
GCTTechs
1 Solution
 
piattndCommented:
You'll need to allow them access to the group itself.  You can do it with a single user making them the "manager" of the group and checking the box that says managers can update the member list. (under the Managed By tab).

Additionally, you can explicitly give permissions to multiple users in the Security tab on the group object.  Add the user and give only the "Read Member Property" and "Write Member Property".  (Verbiage of the option may be slightly different depending on your domain level).
0
 
Santosh GuptaCommented:
Hi,

Create a OU move that user to new OU and run the control delegation wizard. Select "Modify the Membership of Group" permission.
  http://www.howtogeek.com/50166/using-the-delegation-of-control-wizard-to-assign-permissions-in-server-2008/
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now