I am running a clean install on a brand new server running NT 4.0 SP6a. This server is destined for a remote facility. There is a user in this facility that I trust that I want to make a member of the Account Operators group so that this person can manage user accounts if they are locked out or forget their passwords etc. I don’t want this user to have full Administrator authority. Prior to sending the server to the facility I created a test account and made it a member of the Account Operatorsgroup. When I sign onto the machine as this user I go into User Manager for Domains. I then try to double click a user. I then get a message stating that Access is Denied. I can, however, go into any group that I created and add/remove users at will. I can’t add/remove users to system supplied groups. I would like this to work for all levels of admininstative access including backup operator, server operator etc. Any ideas what I need to do?
