Need to create a global group with special permissions

Archived from groups: microsoft.public.win2000.active_directory (More info?)

I was wondering if there is a method I could employ to create a global group
that would be equivelent to the Domain Admins access, with the read-only
persmission. We want to use this group for our Global Network Security
Group. This way we could grant them permissions via the group to be able to
logon to any server and workstation remotely, do remote registry checking,
and map drives. This group would have read-only permissions so they
couldn't change anything on the remote computers.

Please reply via e-mail to steve.steiner@andrew.com

Thank you.