Hello - I need to restrict help desk personnel from having access to the Active Directory Domain. I need them to be able to build new computers and add the computer to the domain. What is the best way to give them the access to do this but prevent them from having administrator access to the domain? Thank you!
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Windows Administrator Rights - Need Advice 1
- Thread starter Kayla6
- Start date
-
1
- #2
mrmoneymatters
MIS
If they need to build computers, that would happen before they are joined to the domain. If they need to be able to join computers to the domain, create a security group for everyone who needs this access. Call it something you will remember. Then, run delegation of control wizard and grant that group the join computer to domain right. Be sure and add each user that needs this permission to that group.
Network Admin
A+, Network+, MCSA 2000, MCSE 2000
Network Admin
A+, Network+, MCSA 2000, MCSE 2000
- Status
Similar threads
- Locked
- Question
- Locked
- Question
- Locked
- Question
