Setting minimal admin rights

[Keith Bloom]

There is probably a very simple answer to this. How can a create a Domain Group that only allows members to reset users passwords?

Thanks, Keith Bloom

[Tony Bennett]

There's a local group called Account Operators, which shows on all Domain Controllers. Put your users into a global group, and put them in this group.

------------
Keith Bloom at 7/1/99 11:24:37 AM

There is probably a very simple answer to this. How can a create a Domain Group that only allows members to reset users passwords?

Thanks, Keith Bloom

[Parker Race]

There is one issue with doing this.
I've set up global groups on the domain that have
Admin rights on specific servers that I don't want
all Domain Admins to have rights to.
Account operators are able to add and remove members
from these groups because they aren't built in Admin groups.
Hopefully this is addressed in 2000 so you can be more granular
like you can with NDS.


------------
Tony Bennett at 4/20/00 7:20:07 AM


There's a local group called Account Operators, which shows on all Domain Controllers. Put your users into a global group, and put them in this group.

------------
Keith Bloom at 7/1/99 11:24:37 AM

There is probably a very simple answer to this. How can a create a Domain Group that only allows members to reset users passwords?

Thanks, Keith Bloom