none
Create a Jr Admin Group with limited permissions for the Domain RRS feed

  • Question

  • I would like to limit the users in my Domain Admin group.  How do you create a security group with limited and tiered levels of security in order to delegate certain admin tasks to engineers and contractors?
    Óman
    Wednesday, December 21, 2011 3:58 PM

Answers

All replies

  • Have you tried putting these people in a group and then applying a group policy?
    Wednesday, December 21, 2011 7:29 PM
  • No.  What settings in the group policy would I have to set to allow then to manage certain admin tasks on the domain?
    Óman
    Wednesday, December 21, 2011 7:39 PM
  • You may also group them via VLAN
    Guowen Su
    Cisco Certified Network Associate
    Cisco Certified Internetwork professional - MPLS
    Certified Information Systems Security Professional
    Microsoft Partner Network 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator:Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Certified Ethical Hacker
    Computer Hacking Forensics Investigator
    Certified Sonicwall Security Administrator
    Microsoft Geeks
    Thursday, December 22, 2011 9:36 AM
  • Here are two resources that may have the answers you're looking for regarding delegating and limiting administrative rights using AD:

    http://technet.microsoft.com/en-us/magazine/2007.02.activedirectory.aspx

    http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=21678

    Hope this helps,

    Kevin


    Kevin Remde US DPE - IT Evangelism - Microsoft Corporation http://blogs.technet.com/kevinremde http://twitter.com/kevinremde
    • Marked as answer by Kevin Remde Friday, December 23, 2011 5:06 PM
    Friday, December 23, 2011 5:06 PM