Discussion Locked

role assignment

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

i have several IT staffs here who will do helpdesk work, they need to unlock the locked users, change password for users, add computer into win2k domain; and the other domain and system administration work is done a senior administrator. now i just give both help desk staffs and senior administrator domain admin rights for their daily work, it will endanger the whole system. what can i do to give helpdesk staffs the limited rights to do their simple work?
thanks.

2 replies

by dc1

Use the delegation of authority wizard and assign only the specific rights that they need to the OU.

by ccnpding

if the user have the right to log onto server through Terminal service, doesn't the control conflict with the fact that he can log onto the server and do anything he can?

This discussion is closed to new replies.