Discussion Locked

Limiting AD Functions

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Is there a way to limit the functionality of AD Admins. I want to assign a specific group the ability to change and reset passwords, but nothing else.

3 replies

by cg it

use the delegation of authority wizard

This question is typically found on Administering Active Directory Services tests [ for W2K this would be test 70-217].They usually have 2 or 3 questions pertaining to delegating authority for administration of OU in Active Directory.

by hitchcock4

He is correct - Delegation of Authority makes sense for limiting the security access.

Another item that I have found useful in the past is to either (1) limit what a manager "sees" (make it easier for him to manage), or (2) limit what a junior administrator "sees" in terms of the overall Organization Unit structure.

One can limit the views and tasks by creating what is called a custom Taskpad.

Two articles you can read on this procedure are at:
http://www.winsupersite.com/showcase/win2k_taskpad.asp
and
http://www.petri.co.il/create_taskpads_for_ad_operations.htm

by ppigeon

Are you still looking for solutions aroung AD? If so, please email me directly at ppigeon@netpro.com

This discussion is closed to new replies.