Greetings all,
I'd like to do something that I can't seem to figure out. I have seven domain controllers (in different physical locations) in my Windows 2000 AD. I'd like to be able to give a few users administrator rights to specific DC's without giving them admin rights to everything in the domain.
I thought I could move the target DC into its own OU and use a group policy with restricted groups to accomplish this. I've tried it however the net effect is that I give my target user admin rights to everything which isn't what I had in mind. Can someone help with this?
Thanks in advance!
-Jay
I'd like to do something that I can't seem to figure out. I have seven domain controllers (in different physical locations) in my Windows 2000 AD. I'd like to be able to give a few users administrator rights to specific DC's without giving them admin rights to everything in the domain.
I thought I could move the target DC into its own OU and use a group policy with restricted groups to accomplish this. I've tried it however the net effect is that I give my target user admin rights to everything which isn't what I had in mind. Can someone help with this?
Thanks in advance!
-Jay
