How can I let user manage distribution/security group in AD?

[kaoboda]

How can I let user manage distribution/security group in AD? I have an Executive Director who wants to be able to control a couple distribution/security groups... how can I give him this access?

Thanks in advance.

 

[GlenJohnson]

I have an Executive Director who wants to be able to control a couple distribution/security groups... how can I give him this access? This would scare the ()*&&* out of me unless you know for a fact he is good with the workings of the os. That's like giving a presidint of a non-pc company admin rites to your domain. He may know how to run the company, but doesn't have a clue as to how to even create a new user. Is he good? You can give him admin rites to just those groups, but still, is he good? Why not just admin them for him? Glen A. Johnson
Microsoft Certified Professional
glen@nellsgiftbox.com


"The time for action is now. It's never too late to do something."
Antoine de Saint-Exupery (1900-1944); French aviator and writer.

 

[kaoboda]

Well, basically she just wants to be able to add/remove users from a certain distribution/security group and nothing else.

I don't want her to be able to personally, but I don't have any other choice... she has the final word.

 

[GlenJohnson]

If she's not good enough to know how, tell her it can't be done unless you make her an admin of the domain, and you won't be held accountable if she mucks something up. Don't have to tell her the truth, right. If this isn't an option, go ahead make her admin of just the groups, and tell her, don't come to me if someday you can't get into something because you fouled it up.

Glen A. Johnson
Microsoft Certified Professional
glen@nellsgiftbox.com


"The time for action is now. It's never too late to do something."
Antoine de Saint-Exupery (1900-1944); French aviator and writer.

 

[tlcscousin]

Read up on delegation of authority.

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q235531

 

[GlenJohnson]

futuretech204, that's a good article. I've found in the past however, that giving anybody outside the IT department any kind of admin rites causes problems. When I took over the network, my previous boss had made 27 admins, only because he didn't realize that when you change a profile, the person has to log off, then log on to get the new rites. I liked the article and it does seem viable, I've just been burned and won't let it happen again. Good luck all. Glen A. Johnson
Microsoft Certified Professional
glen@nellsgiftbox.com


"How many things, too, are looked upon as quite impossible until they have been actually effected?."
Pliny the Elder, Caius Plinius Secundus(c.23-79 A.D.); Roman writer.

 

[tlcscousin]

I do agree with you and yes its not safe to allow someone that isnt qualified have access to the network settings.
Have a good backup on hand.