Please Read: Significant Update Planned, Migrating Forum Software This Month

See more
See less

GPO Question

  • Filter
  • Time
  • Show
Clear All
new posts

  • GPO Question

    I have a group of developers that need to do the following:
    1. User Administration / Create users / unlock accounts / change passwords
    2. Access to Active Directory through MMC but not the servers
    3. Create email accounts
    4. View Event Logs
    I know I can grant some of the tasks by Delegating Authority. Is there a way to create a Tech account in Group Policy that would allow the developers to complete the above tasks and that I can add to as needed?

  • #2
    Re: GPO Question

    Create a group and delegate the rights to the group. Add the developers to the relevant group.


    • #3
      Re: GPO Question

      I've done that but in the delegation authority I don't see anything for viewing event logs, active directory or creating mailboxes. I can only see something for unlocking accounts.