delegation question

[Guest]

Hi,

I am trying to delegate a helpdesk person to manage users accounts in
Activie Directory. This includes creating, deleting, enabling, disabling,
reset/change password etc. of non administrator accounts. However, the
helpdesk is only able to enable ids he created but not the ones the domain
admin created.

Thanks.
Mike

 

[Guest]

the process is:

create OU
move users (non-admins) to OU
in OU run Delegation wizard and asign help desk group with account
administrator role.

warning if GPO exist because the move process delete the association between
users and GPOS.