Guest Seb Spiers Posted June 9, 2008 Posted June 9, 2008 Hi There, I have a problem where I want to allow a more competant user to have local Administrator rights on computers in a specific OU, and to be able to join computers to the domain. I do not want him to be in the Domain Admins group, I do not want him to be able to access any servers. Is there an easy way to do this? His responsibilitys will be to install new desktops and join them to the domain. Obviously I could add him to the local administrators group on all of the PCs but to do this I would involve alot of hassle. Any help much appreciated. Thanks.
Guest Meinolf Weber Posted June 9, 2008 Posted June 9, 2008 Re: Power Users? Hello Seb, See here about delegate control, no admin rights are needed: http://support.microsoft.com/kb/932455 http://support.microsoft.com/kb/243327/en-us Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > Hi There, > > I have a problem where I want to allow a more competant user to have > local Administrator rights on computers in a specific OU, and to be > able to join computers to the domain. > > I do not want him to be in the Domain Admins group, I do not want him > to be able to access any servers. > > Is there an easy way to do this? His responsibilitys will be to > install new desktops and join them to the domain. > > Obviously I could add him to the local administrators group on all of > the PCs but to do this I would involve alot of hassle. > > Any help much appreciated. > > Thanks. >
Guest Seb Spiers Posted June 10, 2008 Posted June 10, 2008 Re: Power Users? Hi, Thanks for your reply. I need the user to be able to install/modify/uninstall software on the machines in the OU. Will this be possible? "Meinolf Weber" wrote: > Hello Seb, > > See here about delegate control, no admin rights are needed: > http://support.microsoft.com/kb/932455 > > http://support.microsoft.com/kb/243327/en-us > > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > > > Hi There, > > > > I have a problem where I want to allow a more competant user to have > > local Administrator rights on computers in a specific OU, and to be > > able to join computers to the domain. > > > > I do not want him to be in the Domain Admins group, I do not want him > > to be able to access any servers. > > > > Is there an easy way to do this? His responsibilitys will be to > > install new desktops and join them to the domain. > > > > Obviously I could add him to the local administrators group on all of > > the PCs but to do this I would involve alot of hassle. > > > > Any help much appreciated. > > > > Thanks. > > > > >
Guest Meinolf Weber Posted June 10, 2008 Posted June 10, 2008 Re: Power Users? Hello Seb, Which user? All or only the guy who is responsible there? If this is the case you can use Restricted groups to make this guy member of local admin group on all workstations in this OU, see here: http://www.frickelsoft.net/blog/?p=13 Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > Hi, > > Thanks for your reply. I need the user to be able to > install/modify/uninstall software on the machines in the OU. > > Will this be possible? > > "Meinolf Weber" wrote: > >> Hello Seb, >> >> See here about delegate control, no admin rights are needed: >> http://support.microsoft.com/kb/932455 >> >> http://support.microsoft.com/kb/243327/en-us >> >> Best regards >> >> Meinolf Weber >> Disclaimer: This posting is provided "AS IS" with no warranties, and >> confers >> no rights. >> ** Please do NOT email, only reply to Newsgroups >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>> Hi There, >>> >>> I have a problem where I want to allow a more competant user to have >>> local Administrator rights on computers in a specific OU, and to be >>> able to join computers to the domain. >>> >>> I do not want him to be in the Domain Admins group, I do not want >>> him to be able to access any servers. >>> >>> Is there an easy way to do this? His responsibilitys will be to >>> install new desktops and join them to the domain. >>> >>> Obviously I could add him to the local administrators group on all >>> of the PCs but to do this I would involve alot of hassle. >>> >>> Any help much appreciated. >>> >>> Thanks. >>>
Guest Tharinda Lasika Posted June 11, 2008 Posted June 11, 2008 PowerUsers? PowerUsers? y don't u create a group and assign new responsibilities-a policy. Or u may use a new OU.
Recommended Posts