Hi-
Using AD Users and computers, I clicked on my domain and delegated the ability to add/remove computers to the domain to a specific group of people who aren't server or domain admins. I checked on the properties page, and the permission is propogated to all child objects. The only problem: users in the group I delegated the right to can't add computers to the domain, they get a message saying insufficient rights!
Any ideas? Anyone had this problem? I need to setup a way for techs/lower level people to add and remove machines without giving them enterprise or domain admin rights. We're running a mixed mode 2k network, although all the servers are 2k Server.
Thanks,
Chris
Using AD Users and computers, I clicked on my domain and delegated the ability to add/remove computers to the domain to a specific group of people who aren't server or domain admins. I checked on the properties page, and the permission is propogated to all child objects. The only problem: users in the group I delegated the right to can't add computers to the domain, they get a message saying insufficient rights!
Any ideas? Anyone had this problem? I need to setup a way for techs/lower level people to add and remove machines without giving them enterprise or domain admin rights. We're running a mixed mode 2k network, although all the servers are 2k Server.
Thanks,
Chris
