From: Joel R. Helgeson (joelhelgeson.com)
Date: Sun Dec 02 2007 - 21:19:10 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Launch "Active Directory Users & Computers"

Listed you have the AD containers used to hold all your objects, select a
tree, right-click the container, click properties. There is a tab called
"Delegate Control" where you can delegate management of the objects located
in that container to whatever groups or individuals you want. It is best to
create a user group, then delegate the control to the group rather than the
user.

This is where it is important that you have your AD containers set up
properly.

Hope that helps provide some direction.

Joel Helgeson

From: full-disclosure-bounceslists.grok.org.uk
[mailto:full-disclosure-bounceslists.grok.org.uk] On Behalf Of happy nino
Sent: Sunday, December 02, 2007 3:42 AM
To: bugtraqsecurityfocus.com; full-disclosurelists.grok.org.uk
Subject: [Full-disclosure] need help in managing administrators

Hi All,
i've a problem in my organization that we have several domain admins, we are
in the process of removing most of them but i need to have a person only
authorized to install
new software to users' computers but without having access to other parts of
the users machines, is this possible ?..can i delegate a function like this
only to certain users with out
being domain admins?
Appreciate your great help
thanks alot

regards,
Nad

  _____

Get closer to the jungle. I'm a Celebrity Get Me Out Of Here!
<http://entertainment.uk.msn.com/tv/realitytv/im-a-celebrity/>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]