|
Posted by Steven L Umbach on November 14, 2005, 11:40 am
If you were Registered and logged in, you could reply and use other advanced thread options
Add that users domain account to the local administrator group on the domain
computers you want him to manage. You can do that with Group Policy
Restricted Groups. Configure Restricted Groups at the Organizational Unit
[NOT domain container] level on an OU where the computer accounts live that
you wan the user to manage. Se the link below for more details. --- Steve
http://www.windowsecurity.com/articles/Using-Restricted-Groups.html ---
Restricted Groups
>I have a domain with multiple DC + around 500 users. all my users have no
> rights to do anything on their machine. what i need is to configure a user
> from IT department that when he will go to install or troubleshoot their
> pc
> will be able to.. but i don't want him or her to have admin rights in the
> domain servers and all.
> any suggestions?
> what rights cani give him or her?
> is domain admin as powefull as bultin administrators ??
| 
XML site map