Domain Permissions

[damanith1]

Hello,
I was wondering what permissions I would need to give in order to give someone the ability to add/remove a user, printer, and connect to another users PC via Dameware or RDP to troubleshoot? I believe I'll need Account OPerators and Print Operators but what about the RDP? TIA.

 

[Seaspray0]

to give someone the ability to add/remove a user": local power users can add/remove accts with the exception of local admin accounts. local admins can add/remove any account.

"printers": must have permissions to install the drivers. By default local power users and local administrators have this right.

"connect to another users PC": When you remote desktop into another computer, it is the same as if you are sitting at the console of the other computer and logging on locally. You must have permissions on the remote computer you are remoting into and at the security level you need (you do not need any special rights on the PC you remote from). If you do something like remote assistance, then you are joining the person's session on the client pc and are using their rights (here's where start>run>runas /user:<localadmin> <program> comes in handy).



Start, Help. You'll be surprised what's there. A+/MCP/MCSE/MCDBA