Which group can add OU's in active directory?

B

Bart

I want to permit a group off users in the domain to add
organizational units (OU's) in active directory. This
group of users do not have administrative privileges and I
want to keep it that way. Does anyone know which group in
a Windows 2000 domain can add OU's in AD, besides
Administrator or a group that is a member off
Administrators?
I don't know if it's possible but any help is
appreciated...
 
J

Jason

Create a group called "OU Creators" or whatever you
like. Then give the group permission to create and
delete OUs. Here's the process: In Active Directory
Users and Computers, right-click your domain. Choose
properties. Click on the security tab. Click on
Advanced. Click Add. Find the group that you created
(OU Creators). Give them full control to "Create
Organizational Unit Objects" and "Delete Organizational
Unit Objects." That should do the trick. Oh, and don't
forget to add the users to the group.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top