Delegation of Authority in AD

[efector]

Hello. I've created a security group in AD called 'help desk' and gone through the delegation of authority wizard to give my help desk people the ability to reset passwords.

they still arent able to rename computer, disable accounts, etc. Is there some way to pick and choose these? They arent listed in the regular delegation wizard.

 

[IllogicallyLogical]

Did you delegate the ability to 'Create, delete, and manage user accounts'? This was listed under common tasks to delegate. Try the 'Create a custom task to delegate' option under the wizard for more specific tasks to delegate. There should be some options to delegate control over computer objects there.

Joey
CCNA, MCP, A+, Network+, Wireless#