Discussion Locked

User needs access to specific group

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Domain is NT 4.0 with Win2000 member servers. I have a developer with one server set up for apps he is working on with a logon that has administrative privileges to that box only. I have created some global groups for him on the domain to use for one of his apps. He has requested the ability to at least view the members of his groups and to maybe also modify them. How can I give him a read only view of domain user groups, and possibly give him administrative rights to his groups only?

2 replies

by gigelul

You can't.
I don't know what app develop your user, maybe full access to change the permissions for a folder is enough.
You must find other way if you don't want to give him Admin or at least Account Operator rights.

by heml0ck

Well actually you can by parsing the sam file... I just don't think you should....
This sounds like your user needs to rethink his apps' security model..

This discussion is closed to new replies.