Add Special Permissions User Account

[slaterino]

Hi,
I am looking to create a new user on my server which would simply give that user the normal restrictions, i.e., same as domain user, but would also give them the priviliges to be able to add new users and also edit users.

I am a relative newbie to Windows Server. Does anyone have any idea what the easiest way to do this would be? For example, is there a specific permission I could allow which would give the user access to the manage users section on the server?

Any advice on this would be greatly appreciated!

Thanks
Russ

 

[IllogicallyLogical]

If you are wanting the user to be able to manage Active Directory user accounts, you may want to look into making the particular user a member of the Built-in "Account Operators" group. Or, you may want to create a new security group in Active Directory and delegate the needed administration privilege. Check out the links below for more information.

- Using Default Group Accounts

http://technet.microsoft.com/en-us/library/bb726982.aspx

- Built-in Groups vs. Delegation

http://www.windowsecurity.com/articles/Built-in-Groups-Delegation.html

- Implementing Active Directory Delegation of Administration

http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html

Joey
CCNA, MCSA 2003, MCP, A+, Network+, Wireless#