Launch "Active Directory Users & Computers" Listed you have the AD containers used to hold all your objects, select a tree, right-click the container, click properties. There is a tab called "Delegate Control" where you can delegate management of the objects located in that container to whatever groups or individuals you want. It is best to create a user group, then delegate the control to the group rather than the user.
This is where it is important that you have your AD containers set up properly. Hope that helps provide some direction. Joel Helgeson From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of happy nino Sent: Sunday, December 02, 2007 3:42 AM To: [EMAIL PROTECTED]; full-disclosure@lists.grok.org.uk Subject: [Full-disclosure] need help in managing administrators Hi All, i've a problem in my organization that we have several domain admins, we are in the process of removing most of them but i need to have a person only authorized to install new software to users' computers but without having access to other parts of the users machines, is this possible ?..can i delegate a function like this only to certain users with out being domain admins? Appreciate your great help thanks alot regards, Nad _____ Get closer to the jungle. I'm a Celebrity Get Me Out Of Here! <http://entertainment.uk.msn.com/tv/realitytv/im-a-celebrity/>
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
