Re: [lopsa-tech] AD management permissions

2013-06-06 Thread Edward Ned Harvey (lopser)
> From: Adam Compton [mailto:compt...@gmail.com] > > You may be interested in the "Delegation of Control Wizard": > http://www.howtogeek.com/50166/using-the-delegation-of-control-wizard- > to-assign-permissions-in-server-2008/ > > These permissions are all ACL based, so you can assign them by han

Re: [lopsa-tech] AD management permissions

2013-06-06 Thread Rickard, Josh A.
From: tech-boun...@lists.lopsa.org [mailto:tech-boun...@lists.lopsa.org] On Behalf Of Adam Compton Sent: Thursday, June 6, 2013 12:30 PM To: Edward Ned Harvey (lopser) Cc: tech@lists.lopsa.org Subject: Re: [lopsa-tech] AD management permissions You may be interested in the "Delegation of Co

Re: [lopsa-tech] AD management permissions

2013-06-06 Thread Adam Compton
You may be interested in the "Delegation of Control Wizard": http://www.howtogeek.com/50166/using-the-delegation-of-control-wizard-to-assign-permissions-in-server-2008/ These permissions are all ACL based, so you can assign them by hand, but the wizard is a nice shortcut. - Adam Compton On

[lopsa-tech] AD management permissions

2013-06-06 Thread Edward Ned Harvey (lopser)
I've only been searching for like a half an hour yet, but so far I'm finding only confusion - Suppose you want to grant some admins the permission to join computers to an AD domain, but only under a certain OU... Or you want certain admins to be able to reset passwords while others cannot...