Delegation

[Guest]

I have a windows 2000 advanced member server, I need to delegate specific
user to create local user accounts on this member server using the mmc, but I
dont want to give him administrative privilages on the server.
Is this applicable? If so, How can I do this?

 

[Srikanth N]

It is possible to delegate a "domain user" to create users. However,
please be informed that if you want a Local user to add local user
accounts, that user must be included in the Administrators group. For
further information, please visit the link given below:

http://support.microsoft.com/?kbid=199878

This artilce describes the usage of Addusers.exe tool to automate user
creation. The Addusers.exe tool for Windows is a 32-bit administrative
utility that uses a comma-delimited text file to create, modify, and delete
user accounts. To use this tool you must be a member of the Administrators
group on the target computer to add accounts and a member of the Users
group to write to accounts.

Srikanth N
This posting is provided "AS IS" with no warranties, and confers no rights.