User with domain admin rights

Archived from groups: microsoft.public.win2000.active_directory (More info?)

You are going to have to be a whole lot more specific on what you want them
to be able to do. Kind of hard to tell someone how to configure a
permission without telling them the goal.

Look at this link to see if this gives you an idea on what you want to
provide via delegation
http://support.microsoft.com/default.aspx?scid=kb;en-us;315676

Also,
If you install the Administrative tools on these users desktops they should
be able to "Snap-In" the modules they will need.

Server install disk

Administrative tools
d:\i386\adminpak.msi

Key in mmc at a command prompt, file, add/remove snap-in, add and then
select the specific tools you would like to use. The tools provided don't
provide the necessary permissions. This is done with a tool such as
delegate wizard as described in the link above.

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"Misaro" <Misaro@discussions.microsoft.com> wrote in message
news 4EA18FA-BEDF-4211-9B09-3F7BC87B8EB8@microsoft.com...
>
> I need to find a way to give access to several IT users in the domain
> controller, I need they have access to all administrative tools but at
> the
> same time they shouldn't be domain administrators.
>
> Somehow those users must to have similars rights to domain admins users
> but
> not all rights that they have ?
>
> What can I do ???
>
> Thanks any comments !
>

Archived from groups: microsoft.public.win2000.active_directory (More info?)

MIsaro,

Paul is 100% right on this one. That is best practice and you really need to
figure out what you need the users to have access to.

"Paul Bergson" wrote:

> You are going to have to be a whole lot more specific on what you want them
> to be able to do. Kind of hard to tell someone how to configure a
> permission without telling them the goal.
>
> Look at this link to see if this gives you an idea on what you want to
> provide via delegation
> http://support.microsoft.com/default.aspx?scid=kb;en-us;315676
>
> Also,
> If you install the Administrative tools on these users desktops they should
> be able to "Snap-In" the modules they will need.
>
> Server install disk
>
> Administrative tools
> d:\i386\adminpak.msi
>
> Key in mmc at a command prompt, file, add/remove snap-in, add and then
> select the specific tools you would like to use. The tools provided don't
> provide the necessary permissions. This is done with a tool such as
> delegate wizard as described in the link above.
>
> --
>
>
> Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "Misaro" <Misaro@discussions.microsoft.com> wrote in message
> news 4EA18FA-BEDF-4211-9B09-3F7BC87B8EB8@microsoft.com...
> >
> > I need to find a way to give access to several IT users in the domain
> > controller, I need they have access to all administrative tools but at
> > the
> > same time they shouldn't be domain administrators.
> >
> > Somehow those users must to have similars rights to domain admins users
> > but
> > not all rights that they have ?
> >
> > What can I do ???
> >
> > Thanks any comments !
> >
>
>
>