Easy Question on Active Directory Security

[Maritime]

Hello I am trying to reconfigure our current security setup and I’m hoping for some help.

We currently have a number of users who are Domain Admins and have the ability to create/delete and unlock user accounts. Management is looking to restrict the number of persons who will be able to do this as follows:

Only the Administrator will be allowed to create or delete accounts. Other users will only be able to unlock accounts, but not be able to create or delete. Can you tell me how I can get this done?

Thanks in advance.

 

[porkchopexpress]

You should be able to delegate these tasks take a look at the link below for info on delegation and post back with any questions.

http://www.microsoft.com/technet/pr...ctory/activedirectory/stepbystep/ctrlwiz.mspx

 

[Maritime]

Thanks. I'll have a look