group rights

[Hutch]

We are full AD.

We need to be able to create a group (or a user) that can
change passwords and unlock accounts but not have control
of groups. The account Operators group gives them access
to change groups. So thats not an option, unless you can
restrict that group from having access to modify groups.
Please help.

Thanks,
Hutch

 

[Chriss3]

Hello

Take a look at the Option Delegate Control you can use on each OU or at
domain level, Click that and you will see the Delegate Control Wizard apper,
there yoy can let users or groups to do some adminstrative tasks, you can
easy restrict them to what you want!

//Christoffer Andersson

 

[Hutch]

Thanks, I'll give this a try.

-----Original Message-----
Hello

Take a look at the Option Delegate Control you can use on each OU or at
domain level, Click that and you will see the Delegate Control Wizard apper,
there yoy can let users or groups to do some adminstrative tasks, you can
easy restrict them to what you want!

//Christoffer Andersson




.