Granting Access to Create New Users

[cderow]

Hello,
I want to give a non-administrative user access to be able to add and delete users from NDS through ConsoleOne, but not have full administrative access to the network. Is there a way this can be done without opening up the entire network to this person?

 

[Datong]

Hi, Not as easy as it sounds. Goto the Novell website (

http://www.novell.com/support)

and find the Knowledgbase, Your query should be "minimum rights to create users" and read some of the articles there. It will give you a better insight into what you want and the drawbacks of doing so. There should also be more detailed info on the objects you need to grant access to to allow what you want. Not having done this myself (as I'm always a full admin) I can't give exact advice, but hope this will help.

(Come on the rest of you, there must be some admins out there who have done this or simnilar!)

 

[lerdalt]

I've done something similar, and if I can find it, have a spreadsheet showing all the property rights that I assigned.

What's your email address and I can send it to you.

 

[marvhuffaker]

Difficult to pull off because generally the ability to create a user also gives ability to create other objects as well.

With NetWare 6.5, you can configure Roles in iManager to do this. But you don't have that with Netware 5.1. Okay, you could install a NetWare 6.5 server into your tree and use it to manage this stuff. But that goes beyond what I am willing to try to explain in this forum.

Also if you had separate containers where your users are .. in other words, you have a container with printers, servers, volumes, etc.. and your users are in a different one, then you could give this user the ability to control anything in the User container while keeping the other containers restricted.





Marvin Huffaker, MCNE

http://www.redjuju.com

 

[cderow]

Thanks for all of your responses. I found what I was looking for based off of everyone's suggestions. Thanks again.