Power Users?

  • Thread starter Thread starter Seb Spiers
  • Start date Start date
S

Seb Spiers

Hi There,

I have a problem where I want to allow a more competant user to have local
Administrator rights on computers in a specific OU, and to be able to join
computers to the domain.

I do not want him to be in the Domain Admins group, I do not want him to be
able to access any servers.

Is there an easy way to do this? His responsibilitys will be to install new
desktops and join them to the domain.

Obviously I could add him to the local administrators group on all of the
PCs but to do this I would involve alot of hassle.

Any help much appreciated.

Thanks.
 
Hello Seb,

See here about delegate control, no admin rights are needed:
http://support.microsoft.com/kb/932455

http://support.microsoft.com/kb/243327/en-us


Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi There,
>
> I have a problem where I want to allow a more competant user to have
> local Administrator rights on computers in a specific OU, and to be
> able to join computers to the domain.
>
> I do not want him to be in the Domain Admins group, I do not want him
> to be able to access any servers.
>
> Is there an easy way to do this? His responsibilitys will be to
> install new desktops and join them to the domain.
>
> Obviously I could add him to the local administrators group on all of
> the PCs but to do this I would involve alot of hassle.
>
> Any help much appreciated.
>
> Thanks.
>
 
Hi,

Thanks for your reply. I need the user to be able to
install/modify/uninstall software on the machines in the OU.

Will this be possible?

"Meinolf Weber" wrote:

> Hello Seb,
>
> See here about delegate control, no admin rights are needed:
> http://support.microsoft.com/kb/932455
>
> http://support.microsoft.com/kb/243327/en-us
>
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Hi There,
> >
> > I have a problem where I want to allow a more competant user to have
> > local Administrator rights on computers in a specific OU, and to be
> > able to join computers to the domain.
> >
> > I do not want him to be in the Domain Admins group, I do not want him
> > to be able to access any servers.
> >
> > Is there an easy way to do this? His responsibilitys will be to
> > install new desktops and join them to the domain.
> >
> > Obviously I could add him to the local administrators group on all of
> > the PCs but to do this I would involve alot of hassle.
> >
> > Any help much appreciated.
> >
> > Thanks.
> >
>
>
>
 
Hello Seb,

Which user? All or only the guy who is responsible there? If this is the
case you can use Restricted groups to make this guy member of local admin
group on all workstations in this OU, see here: http://www.frickelsoft.net/blog/?p=13

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi,
>
> Thanks for your reply. I need the user to be able to
> install/modify/uninstall software on the machines in the OU.
>
> Will this be possible?
>
> "Meinolf Weber" wrote:
>
>> Hello Seb,
>>
>> See here about delegate control, no admin rights are needed:
>> http://support.microsoft.com/kb/932455
>>
>> http://support.microsoft.com/kb/243327/en-us
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi There,
>>>
>>> I have a problem where I want to allow a more competant user to have
>>> local Administrator rights on computers in a specific OU, and to be
>>> able to join computers to the domain.
>>>
>>> I do not want him to be in the Domain Admins group, I do not want
>>> him to be able to access any servers.
>>>
>>> Is there an easy way to do this? His responsibilitys will be to
>>> install new desktops and join them to the domain.
>>>
>>> Obviously I could add him to the local administrators group on all
>>> of the PCs but to do this I would involve alot of hassle.
>>>
>>> Any help much appreciated.
>>>
>>> Thanks.
>>>
 
PowerUsers?

y don't u create a group and assign new responsibilities-a policy. Or u may use a new OU.
 
Back
Top