No not really, unless you consider some of the groups roles (i.e. Administrators, Backup Operators, etc....), which I don't.
Use the delegation Wizard and if it isn't granular enough roll your own. Christopher Bodnar Enterprise Achitect I, Corporate Office of Technology Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 [email protected] The Guardian Life Insurance Company of America www.guardianlife.com From: "Heaton, Joseph@DFG" <[email protected]> To: "NT System Admin Issues" <[email protected]> Date: 02/29/2012 01:34 PM Subject: Roles in AD I know that Exchange has RBAC roles. Does AD itself have this type of functionality? We’re trying to create least privilege type situation for our field support so that they can edit contact info, and reset passwords, and unlock accounts, but pretty much nothing else. Joseph L. Heaton Staff Information Systems Analyst Windows Server Support Information Technology Branch Department of Fish and Game 1807 13th Street, Suite 201 Sacramento, CA 95811 (916) 323-1284 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
<<image/jpeg>>
