Announcement

Collapse
No announcement yet.

Restrict access to modify group memberships in AD

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Restrict access to modify group memberships in AD

    Hi,

    I've created an OU for some restricted accounts that I only want Domain Admins from being able to change.
    Service desk and desktop staff should only be able to view details and reset the password.

    I have changed the security settings for the OU to Read, Change Password, Reset Password but still they can use add remove group memberships but everything else is 'greyed out'

    Has anyone managed to successfully restrict groups from changing membership groups of user accounts?

    Many Thanks
    Dave

  • #2
    Re: Restrict access to modify group memberships in AD

    hello

    you can use the delegate control process on specific OU to allow specific permissions


    Smart-X

    Comment

    Working...
    X