RE: [ActiveDir] Restricting Administrative Permissions

[Rich Milburn]

Title: [ActiveDir] Restricting Administrative Permissions

You can set assign pretty granular permissions in AD.  If you view Advanced options in the ADUC, you can get to the security tab and assign permissions for just about any action, say for a group that you want to give this access to.  Have a look and see if this meets your needs. Rich From: Stuart, Cory G. [mailto:[EMAIL PROTECTED] Sent: Friday, February 06, 2004 10:01 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Restricting Administrative Permissions   Hi All,         I know that you can limit who can add workstations to a domain via Group Policy.  Is there a way that you can allow someone to create users, but not change their passwords or group memberships, etc? Thanks! Cory ----------------------------------- Cory G. Stuart Network Administrator Nuclear Engineering Division Argonne National Laboratory ----------------------------------- -------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE------- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system.