Remote computer management

[Blutch]

On my DC's local admins have no right to log on locally. However they have the necessary rights to (FC) administrate their OU's.
Now I want them to be able to create/delete folders, shares, give ntfs permissions, close sessions and so one with the remote computer management tool.
What right do I have to give them?

Thx for all the help...

 

[itsp1965]

Although you can create shares using Computer mgmt you can't use it for setting up files and folders. If you would like your domain admins to be able to do so then they would need Full Control access to the drives on the server and from there they can map to the server and can create files/folders and modify security settings at will
Hope this helps

 

[Blutch]

The're no domain admins, they just have delegation FC on their OU's. Furthermore there is no problem to give them FC on the partition where these files/directories are stored. The problem is that they have no logon locally rights, so they have to connect using computer management and create shared folders from there. However they get an Access Denied when connecting to the shares/sessions/...

 

[Sybje]

Is the Remote Registry Service started? You need this service to access the computer remotely...

Thereby, the users, who have to manage the machine remotely have to be placed in the Administrators group.

Maybe the Power Users groups will do it. You can modify the local security settings using secpol.msc.

 

[Blutch]

Again, it is a Domain Controller, not a regular legacy server.
The remote registry service is started, so...

Thx for the replies, but anyone any other ideas?