How to allow non admin user to create domain users?

[Guest]

Is there a way to allow non admin users to create domain users without giving
them the domain admin rights?

 

[Bruce Chambers]

Is there a way to allow non admin users to create domain users without giving
them the domain admin rights?

What kind of domain? WinNT, Win2k, or Win2K3 Active Directory. Hint:
Look for a domain group entitled "Account Operators."


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

 

[Guest]

What kind of domain? WinNT, Win2k, or Win2K3 Active Directory. Hint:
Look for a domain group entitled "Account Operators."


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

 

[John Mathew]

Is there a way to allow non admin users to create domain users without
giving
them the domain admin rights?

create a user and add power user group into membership.

So the user can fully manage user account but not allowed to do
anything to administrator group.

John Mathew

 

[Steven L Umbach]

You can use Active Directory delegation to give a regular domain user the
permissions to create user accounts. The link below explains how to do
t. --- Steve

http://www.windowsecurity.com/articles/Built-in-Groups-Delegation.html