PC Review


Reply
Thread Tools Rate Thread

Allow a domain user to change local permissions on domain machineswithout allowing full rights on domain controllers

 
 
none
Guest
Posts: n/a
 
      2nd Aug 2005
Hi

I would like give a domain user permission to change and reset
file/share permissions locally on computers which are joined to our
domain. I have delegated permission for them to add/remove computers
from the 'Computers' folder in Active Directory Computers and Users, and
also add/remove users from the '*ourdomain* users' and *ourdomain
groups'. Is this a group policy change I need to make?

Thanks for your help

T.
 
Reply With Quote
 
 
 
 
Jorge_de_Almeida_Pinto
Guest
Posts: n/a
 
      5th Aug 2005
"" wrote:
> Hi
>
> I would like give a domain user permission to change and reset
>
> file/share permissions locally on computers which are joined
> to our
> domain. I have delegated permission for them to add/remove
> computers
> from the 'Computers' folder in Active Directory Computers and
> Users, and
> also add/remove users from the '*ourdomain* users' and
> *ourdomain
> groups'. Is this a group policy change I need to make?
>
> Thanks for your help
>
> T.


Move the computers to an OU. It is not possible to apply a GPO to the
computers container.

Create a group and use the restricted group feature to that group to
the local administrators group on each computer/client in the domain.

concerning the users and groups I don’t understand what you mean

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Active-...ict403687.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1337577
 
Reply With Quote
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Allowing a domain user account (specify) to add workstation to Windows 2000 domain (SP4) J.H Microsoft Windows 2000 Active Directory 9 16th Nov 2006 01:36 PM
Allow domain user to change local permissions on domain computers,without have full right on domain controllers? none Microsoft Windows 2000 Group Policy 5 11th Aug 2005 02:30 AM
allowing a user rights only to join pcs to domain and install driv =?Utf-8?B?c3JpZGhhcg==?= Microsoft Windows 2000 Group Policy 1 9th Jan 2005 04:17 PM
joining server from a trusted domain into current domain, what happens to cross-domain permissions? Jason Microsoft Windows 2000 Active Directory 2 1st Dec 2003 09:16 PM
Unable to get list of Domain Controllers "The list of domain controllers for domain is unavailable because: Not enough storage is available to complete this operation." John Foutch Microsoft Windows 2000 Active Directory 0 31st Jul 2003 06:44 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 07:04 AM.