Re: [ActiveDir] Default Domain Controller Container

[Ninet Segar]

Title: Message

I don't want to actually use the Backup Operator or Server Operator groups, but I would like to emulate those rights for a subset of DC's.  Creating an OU substructure for DC's would allow me to assign the log on locally right to a specific group.  If a designed the OU structure along the lines of my site structure, it could facilitate me enabling a group for local admins in Sydney that would have rights to the Sydney DC's but not to the HongKong DC's.   I am not sure that the backup operator or server operator roles can be fine tuned to that level, but there are somethings that could be.