new network-administrator delegation

[felon]

I have installed a new network (MS2k) using 3 machines:
AD, DNS, and one client.

How do I create a group (or change an existing group) so that group can do anything that an administrator can do except change the administrator's passord.

 

[MattWray]

I think you can just use the administrators group with full control. Matt Wray
CCNA, MCP
mwray77518@yahoo.com

 

[felon]

If I do that wont a member of the new group be able to manipulate the administrator group/account?

 

[MattWray]

Yes they could manipulate that group. You could try the Power Users group. Matt Wray
CCNA, MCP
mwray77518@yahoo.com

 

[felon]

If I do that, can a member of the new group will be able to manipulate the administrator group/user?

 

[felon]

ignor that last response. Power Users??? I dont have that group.

 

[MattWray]

What are you trying to accomplish? Might be easier to point you in the right direction. Matt Wray
CCNA, MCP
mwray77518@yahoo.com

 

[felon]

I want to be the administrator of my network-full control. I also want to delegate administrative tasks to other administrators. However, I dont want them to be able to change my password. If they were able to change my administrator's password then they could have control of the system and lock me out. Make sense?

It would seem to be a common problem; i would be suprised if Microsoft doesnt have something in AD to handle ths type of problem when building 2000.

Account Operators group is close to what i am looking for. Members of this group cant change the administrative password. However when an account operator tries to operate DNS or IIS on another server, he is denied access.

 

[felon]

mattwray

I have sent you an email containing a .bmp of what the screen says when i try and log on to dns

 

[MattWray]

If you add other users to the administrators group, they should not be able to change anything on THE administrator account. You can also delegate control for certain things, though I have not actually used that. I will check for sure about the Administrator and the administrators group, passwords etc. and post back.
I have not received an Email. Matt Wray
CCNA, MCP
mwray77518@yahoo.com

 

[markor]

Matt Wray is right.
Just add new user with administrator privilegies.