Solved

Question about AD permissions

Posted on 2016-08-11
2
78 Views
Last Modified: 2016-08-12
I need someone to be able to have read-only permissions to our AD structure. What permissions can I give them to have the minimum permissions to do this? If I create a account what group should I add them to?
0
Comment
Question by:Thomas N
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 22

Expert Comment

by:yo_bee
ID: 41753141
You can use Delegation wizard with in ADUC.
  • Open ADUC (Active Directory Users and Computers)
  • Right the Domain if you want this user to have read rights to the entire domain or select the OU that you wan this user to have rights to.
  • Select Delegation Control and the Wizard will start.
  • Search for the user you want to delegate Read rights to and hit next
  • Select Read All User Information.
that should be it.
If you want to help with additional users in the future create a group and call it something like DomainReadOnlyGroup and do the same as what is illustrated above and add this user to that newly created group.
0
 
LVL 54

Accepted Solution

by:
McKnife earned 500 total points
ID: 41753455
Any domain user has read permissions out of the box - what would you like to do that a standard user cannot do already? What would you like to prevent that a standard user can so?
0

Featured Post

Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question