Need help creating a domain "power user"

[bradx]

We are currently expanding our IT department from 2 to 4 employees. Currently the CIO and I have domain admins rights to our domain; however, we do not want to give this access to our new employees. We want to give them enough access to do their "helpdesk" job, but we do not want to give them full administrative access, for obvious reasons. I understand how to create groups and assign rights; however, I would like to hear for others regarding what kind of rights they have allowed to their helpdesk personnel.

I realize that this will be something that will be taylored to my environment and requirements, but hearing from you guys/gals on your experiences would be very helpful.

Thanks in advance

 

[noellees1]

Why not create a new user just for them i.e helpdesk user. then just use pol edit to edit the functions of that to then change desktop settings save settings on exit etc. also you can also deny acces to programs by using right click and going to properptys then selecting the security tab, which then you can specify which users have acces to that folder, whoever doesnt have access to it cant run the program in that folder.