Power Users?

[Guest Seb Spiers]

Hi There,

 

I have a problem where I want to allow a more competant user to have local

Administrator rights on computers in a specific OU, and to be able to join

computers to the domain.

 

I do not want him to be in the Domain Admins group, I do not want him to be

able to access any servers.

 

Is there an easy way to do this? His responsibilitys will be to install new

desktops and join them to the domain.

 

Obviously I could add him to the local administrators group on all of the

PCs but to do this I would involve alot of hassle.

 

Any help much appreciated.

 

Thanks.

[Guest Meinolf Weber]

Re: Power Users?

 

Hello Seb,

 

See here about delegate control, no admin rights are needed:

http://support.microsoft.com/kb/932455

 

http://support.microsoft.com/kb/243327/en-us

 

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi There,

>

> I have a problem where I want to allow a more competant user to have

> local Administrator rights on computers in a specific OU, and to be

> able to join computers to the domain.

>

> I do not want him to be in the Domain Admins group, I do not want him

> to be able to access any servers.

>

> Is there an easy way to do this? His responsibilitys will be to

> install new desktops and join them to the domain.

>

> Obviously I could add him to the local administrators group on all of

> the PCs but to do this I would involve alot of hassle.

>

> Any help much appreciated.

>

> Thanks.

>

[Guest Seb Spiers]

Re: Power Users?

 

Hi,

 

Thanks for your reply. I need the user to be able to

install/modify/uninstall software on the machines in the OU.

 

Will this be possible?

 

"Meinolf Weber" wrote:

> Hello Seb,

>

> See here about delegate control, no admin rights are needed:

> http://support.microsoft.com/kb/932455

>

> http://support.microsoft.com/kb/243327/en-us

>

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

> > Hi There,

> >

> > I have a problem where I want to allow a more competant user to have

> > local Administrator rights on computers in a specific OU, and to be

> > able to join computers to the domain.

> >

> > I do not want him to be in the Domain Admins group, I do not want him

> > to be able to access any servers.

> >

> > Is there an easy way to do this? His responsibilitys will be to

> > install new desktops and join them to the domain.

> >

> > Obviously I could add him to the local administrators group on all of

> > the PCs but to do this I would involve alot of hassle.

> >

> > Any help much appreciated.

> >

> > Thanks.

> >

>

>

>

[Guest Meinolf Weber]

Re: Power Users?

 

Hello Seb,

 

Which user? All or only the guy who is responsible there? If this is the

case you can use Restricted groups to make this guy member of local admin

group on all workstations in this OU, see here: http://www.frickelsoft.net/blog/?p=13

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi,

>

> Thanks for your reply. I need the user to be able to

> install/modify/uninstall software on the machines in the OU.

>

> Will this be possible?

>

> "Meinolf Weber" wrote:

>

>> Hello Seb,

>>

>> See here about delegate control, no admin rights are needed:

>> http://support.microsoft.com/kb/932455

>>

>> http://support.microsoft.com/kb/243327/en-us

>>

>> Best regards

>>

>> Meinolf Weber

>> Disclaimer: This posting is provided "AS IS" with no warranties, and

>> confers

>> no rights.

>> ** Please do NOT email, only reply to Newsgroups

>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>>> Hi There,

>>>

>>> I have a problem where I want to allow a more competant user to have

>>> local Administrator rights on computers in a specific OU, and to be

>>> able to join computers to the domain.

>>>

>>> I do not want him to be in the Domain Admins group, I do not want

>>> him to be able to access any servers.

>>>

>>> Is there an easy way to do this? His responsibilitys will be to

>>> install new desktops and join them to the domain.

>>>

>>> Obviously I could add him to the local administrators group on all

>>> of the PCs but to do this I would involve alot of hassle.

>>>

>>> Any help much appreciated.

>>>

>>> Thanks.

>>>

[Guest Tharinda Lasika]

PowerUsers?

 

PowerUsers?

 

y don't u create a group and assign new responsibilities-a policy. Or u may use a new OU.