Delegating group administration within a domain (permissions problem)

Discussion in 'Microsoft Windows 2000 Active Directory' started by Russ, Jul 2, 2003.

  1. Russ

    Russ Guest

    I have a situation where I want a set of administrators to add/remove
    computers to global groups within AD (used for Sofware distribution).
    I only want them to be able to add/remove computers from these groups
    if they are computers within their region. I can restrict their right
    to add computers but I am having difficulty restricting their right to
    see/remove only the computers that they administer. The groups for
    software distrubition are centrally located and I don't want to have
    to create new groups for each region and nest them inside the central
    groups.

    Thanks in advance,

    Russell
     
    Russ, Jul 2, 2003
    #1
    1. Advertisements

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Harlan Messinger

    Copy domain users from local group to domain group

    Harlan Messinger, Jul 23, 2003, in forum: Microsoft Windows 2000 Active Directory
    Replies:
    1
    Views:
    546
    Matjaz Ladava [MVP]
    Jul 23, 2003
  2. Rich Raffenetti

    Delegating OU administration

    Rich Raffenetti, Aug 10, 2003, in forum: Microsoft Windows 2000 Active Directory
    Replies:
    0
    Views:
    326
    Rich Raffenetti
    Aug 10, 2003
  3. Kevin Brinnehl

    Delegating Domain Controller Administration

    Kevin Brinnehl, Oct 6, 2003, in forum: Microsoft Windows 2000 Active Directory
    Replies:
    3
    Views:
    1,562
    Joe Richards [MVP]
    Oct 7, 2003
  4. Matt Nowell

    Delegating permissions to move user accounts

    Matt Nowell, Nov 11, 2003, in forum: Microsoft Windows 2000 Active Directory
    Replies:
    7
    Views:
    2,672
    Matjaz Ladava [MVP]
    Nov 16, 2003
  5. Jason
    Replies:
    2
    Views:
    1,043
    Jason
    Dec 1, 2003
  6. Guest

    domain admin group of parent domain is NOT a member domain admin g

    Guest, Mar 1, 2005, in forum: Microsoft Windows 2000 Active Directory
    Replies:
    4
    Views:
    897
    Steve Athanas
    Mar 3, 2005
  7. chrism

    Delegating Administration

    chrism, Aug 8, 2006, in forum: Microsoft Windows 2000 Active Directory
    Replies:
    1
    Views:
    332
    Paul Bergson
    Aug 8, 2006
  8. Cartman

    Implementing an approval workflow for delegating administration

    Cartman, Dec 11, 2007, in forum: Microsoft Windows 2000 Active Directory
    Replies:
    1
    Views:
    311
    Brian Desmond [MVP]
    Dec 12, 2007
Loading...