Help with finding these tasks

[bradx]

I found some tasks that I would like some of my groups to have access to and some to not. Does anyone know where I can edit the groups assigned to the below tasks?

Assign user rights
Create, delete, and manage user accounts
Modify the membership of a group
Create and delete groups
Reset passwords on user accounts
Read all user information
Manage group policy links
Manage printers
Create and delete printers

 

[G3NO]

Put them in the groups: Account operator and printer operator.

Should work fine.

Cheers
Damien

 

[bradx]

That would work fine if I wanted to give them access to all of these tasks, but I do not want to give them access to the top 4. I am trying to create a "helpdesk" group that will not allow to do anything with regards to users except resetting and unlocking passwords.

I might be making this to complicated. I want to make a group that has enough administrator privleges to perform "helpdesk" tasks, but not enough to makes changes to user information (except passwords,) take ownership, etc.

 

[G3NO]

check this out.

http://www.winnetmag.com/Articles/ArticleID/41105/pg/2/2.html

have just had a little look at it. I think that´s what you are looking for.

Damien