Allow a specific group to add/remove computers from OU Computers

G

Guest

Hi

I'd like to allow the HelpDesk team to add/remove computers from the OU Computers. I tried to use the Delegation control wizard, and the effective rights (Create a computer object / Delete a computer object) seem to be not sufficient to manage computers. When for example they need to remove and recreate a computer account they get an "Access denied" error message

What are all the rights this group should have to manage computer accounts only (not users)

Thanks in advance.
 
J

Jerold Schulman

Hi,

I'd like to allow the HelpDesk team to add/remove computers from the OU Computers. I tried to use the Delegation control wizard, and the effective rights (Create a computer object / Delete a computer object) seem to be not sufficient to manage computers. When for example they need to remove and recreate a computer account they get an "Access denied" error message.

What are all the rights this group should have to manage computer accounts only (not users) ?

Thanks in advance.


See http://support.microsoft.com?kbid=818091


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top