Windows Forum

Ask something
Discussion Locked

How assign certain admin rights in AD?

0 helpful
5 replies

by r_p_mann

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I want to give certain users the ability to stop and start services and to remotely copy files on one of my NT servers. In Active Directory how can I assign just those permissions to these users? Is it possible? thanks.

5 replies

by california dead head

2 choices
Easiest is to create an mmc that has only the abilities loaded into it that you want those users to have. You can go to run and type mmc add the services snap-in only and give permission for that mmc to the users you want to be able to edit services. Place the mmc on the users desktop. Make sure that the users do not have permission to change the mmc or they could add more snap-ins

Second
in active directory create an OU with the users. Set a group policy for that OU that has the permissions you want the users to have.

Good luck

by huckleberryhound

I recommend that you check out this knowledge base article
HOW TO: Grant Users Rights to Manage Services in Windows 2000 (Q288129)
and also look at the SUBINACL resource kit utility.

This discussion is closed to new replies.