permission to manage group

hi, assign users belonging specific group permission manage other users.

i mean trivial activity create new users , move them existing group.

i able assign right create new user, not right move in specific group.

i mean user newly created inserted in domain users, need move in "uffici" group.

i've w2k3 sbs sp2 dc , bdc w2k3 standard sp2. administrator able move user.

what can do?

thanks

hi,

 

regarding how delegate move user operation, based on test, need delegated user/group have following permissions on source/target ous:

 

apply onto: object , child objects

 

create user objects

delete user objects

 

apply onto: user objects

 

write properties

delete

 

for more information, please refer following links:

 

best practices delegating active directory administration

http://www.microsoft.com/downloads/en/details.aspx?familyid=631747a3-79e1-48fa-9730-dae7c0a1d6d3&displaylang=en  

 

best practices delegating active directory administration appendices

http://www.microsoft.com/downloads/en/details.aspx?familyid=29dbae88-a216-45f9-9739-cb1fb22a0642&displaylang=en  

 

thanks.

nina

---

please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.

Windows Server  >  Group Policy