Guest guv Posted August 15, 2007 Posted August 15, 2007 I want to give some users access to AD user and computers on their PC's for them to administer a specific OU. I want them to unlock accounts for users under this specific OU. I have setup a msc file which gives them access to the OU by restricting access by giving them limited access to a single window. I have delegated control on the OU as well so that they can unlock accounts only. I copied the msc file onto their PC's but when they open the file it says cannot open file. I dont want to install the adminpak.msi as this will give them access to all other AD tools even though they dont have permissions. But I do not want them to see the tools. Is there a way I can get them to access to AD users and computer and preferably with that specific OU view only.
Guest Danny Sanders Posted August 15, 2007 Posted August 15, 2007 Re: Access to ADUC only This article details how to install only specific admin tools using adminpak. See: http://support.microsoft.com/kb/314978/en-us hth DDS "guv" <guv@> wrote in message news:OSffqL03HHA.5796@TK2MSFTNGP05.phx.gbl... >I want to give some users access to AD user and computers on their PC's for >them to administer a specific OU. I want them to unlock accounts for users >under this specific OU. > > I have setup a msc file which gives them access to the OU by restricting > access by giving them limited access to a single window. I have delegated > control on the OU as well so that they can unlock accounts only. > > I copied the msc file onto their PC's but when they open the file it says > cannot open file. > I dont want to install the adminpak.msi as this will give them access to > all other AD tools even though they dont have permissions. But I do not > want them to see the tools. > > Is there a way I can get them to access to AD users and computer and > preferably with that specific OU view only. >
Recommended Posts