Active Director rights

G

Guest

I have a new employee who just came on baord. I want to gove him the abilty
to create news users, reset passwords, etc in AD. I want him to be able to
do this without giving him domain admin rights. How can I do this?
 
L

Leuchtflux

I have a new employee who just came on baord. I want to gove him the abilty
to create news users, reset passwords, etc in AD. I want him to be able to
do this without giving him domain admin rights. How can I do this?

And don't forget Best Practices for Delegating Active Directory
Administration Appendices (http://www.microsoft.com/downloads/
details.aspx?FamilyID=29dbae88-a216-45f9-9739-
cb1fb22a0642&DisplayLang=en). It's also possible to do that with third-
party tools and, sometimes, in the more natural way. For example we
use desktop authority (http://www.scriptlogic.com) where the
delegation can be split-up on roles much like we split the roles for
servers. That helps for role distribution especially with new
administrators.
 
J

Joe Richards [MVP]

LOL

Another script logic shill.

This almost has me to the point of putting ScriptLogic sucks as my sig.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm
 
H

Herb Martin

Joe Richards said:
LOL

Another script logic shill.

This almost has me to the point of putting ScriptLogic sucks as my sig.

I will if you will <grin>
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top