I am trying to create a group for tech's to be able to add
machines to a domain, install drivers and software, edit
permissions, basically everything an administrator does
however I do not want them to be Domain Admins. What is
the best method of creating this type of group? How do I
apply the permissions? Do i edit a security template and
apply it? Do i add them to the restricted groups of the
OU i want them to be able to administer? Any help would
be appreciated. thanks, db

You can set them up as an Account Operator. You can edit
the security settings, by accessing domain users and
comptuers, GPO policy.


>-----Original Message-----
>I am trying to create a group for tech's to be able to
add
>machines to a domain, install drivers and software, edit
>permissions, basically everything an administrator does
>however I do not want them to be Domain Admins. What is
>the best method of creating this type of group? How do I
>apply the permissions? Do i edit a security template and
>apply it? Do i add them to the restricted groups of the
>OU i want them to be able to administer? Any help would
>be appreciated. thanks, db
>.
>