Hello all,

I need to set permissions for users so that they are removed from the domain
admins group, but still retain permissions such as having access to change
passwords, add printers, and add computers to the domain. We are currently
running a Windows 2000 domain in native mode.

Whats the best way to achieve this?

Thanks for your time

Sincerely,

Greg

Hi,

I would put them in new group and than delegate control to this group on the
domain/OU level to allow it all required tasks ( right click on domain name
or OU name and choose Delegate control - than delegation wizard starts)

Regards
Dominik


"Greg" <Greg@discussions.microsoft.com> wrote in message
news:B031930E-ED4F-4F94-8BE1-91E3F877AB95@microsoft.com...
> Hello all,
>
> I need to set permissions for users so that they are removed from the
> domain
> admins group, but still retain permissions such as having access to change
> passwords, add printers, and add computers to the domain. We are currently
> running a Windows 2000 domain in native mode.
>
> Whats the best way to achieve this?
>
> Thanks for your time
>
> Sincerely,
>
> Greg