Access to ADUC only

[Guest guv]

I want to give some users access to AD user and computers on their PC's for

them to administer a specific OU. I want them to unlock accounts for users

under this specific OU.

 

I have setup a msc file which gives them access to the OU by restricting

access by giving them limited access to a single window. I have delegated

control on the OU as well so that they can unlock accounts only.

 

I copied the msc file onto their PC's but when they open the file it says

cannot open file.

I dont want to install the adminpak.msi as this will give them access to all

other AD tools even though they dont have permissions. But I do not want

them to see the tools.

 

Is there a way I can get them to access to AD users and computer and

preferably with that specific OU view only.

[Guest Danny Sanders]

Re: Access to ADUC only

 

This article details how to install only specific admin tools using

adminpak.

See:

http://support.microsoft.com/kb/314978/en-us

 

hth

DDS

 

 

"guv" <guv@> wrote in message news:OSffqL03HHA.5796@TK2MSFTNGP05.phx.gbl...

>I want to give some users access to AD user and computers on their PC's for

>them to administer a specific OU. I want them to unlock accounts for users

>under this specific OU.

>

> I have setup a msc file which gives them access to the OU by restricting

> access by giving them limited access to a single window. I have delegated

> control on the OU as well so that they can unlock accounts only.

>

> I copied the msc file onto their PC's but when they open the file it says

> cannot open file.

> I dont want to install the adminpak.msi as this will give them access to

> all other AD tools even though they dont have permissions. But I do not

> want them to see the tools.

>

> Is there a way I can get them to access to AD users and computer and

> preferably with that specific OU view only.

>