General discussion


NT 4.0 Administrative Privileges

By pete.zerger ·
I want to give a goup of IT users the right to create Domain user accounts without making them Domain Admins. I dont want them to have capability to add / remove users from Domain Admins group.

Is there any way to do this?

This conversation is currently closed to new comments.

1 total post (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

NT 4.0 Administrative Privileges

by banyanman In reply to NT 4.0 Administrative Pri ...

Sure is. NT 4 has built in Domain Local Group called Account Operators. Add the users that need to create and manage accounts to this group. Since the priveledge to add users to the Domain Admins and Administrator groups is at a higher level, they cannot modify these two groups or any accounts that are members of the two. If the account operators do not use the remote tools, then you may need to adjust your domain security settings to allow them to log on locally to a dc to make account changes. HTH.

Back to Windows Forum
1 total post (Page 1 of 1)  

Related Discussions

Related Forums