Creating Group but limiting rights

[Norman Rosenthal]

I would like to create a group but limit what the group can do.

Here is what I would like to do.

Create Users
Create Exchange Mailboxes
Add Members to Groups
Add Computers to Domain
Disable Accounts.

Now the drawback is I would like the user to not have the permissions to add
themselves to a higher account or reset a password say of the Domain Admin
or a account that has Domain Admin

Any help would be appreciated.

Thank you
Norman

 

[Mark Fugatt [MVP]]

Use the Restricted Groups feature in Windows 2000

--
Mark Fugatt
Microsoft Exchange MVP
www.exchangetrainer.com
www.msexchange.org

 

[Norman Rosenthal]

Where are the restricted groups and which one would you recommend

Thanks
Norman

 

[Mark Fugatt [MVP]]

Here are some links that you might want to look at:
http://support.microsoft.com/?kbid=279301
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/611.asp

 

[Bruce Chambers]

Greetings --

Isn't this exactly what the Account Operator group is for?

Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Norman Rosenthal]

I tried that and it didn't work they could reset my password and I was a
member of Domain Admins

Thanks
Norman