- Create users from XP Pro?
- Posted by Edward Lee on March 5th, 2004
I would like to give a user the ability to create new users on our SBS2k3
server from a Windows XP Pro workstation. I do not want this user to have
any other administrative type permissions on the server. Is this possible?
If so, some guidance would be most appreciated.
Thanks,
Ed Lee
- Posted by Chriss3 on March 5th, 2004
Hi Edward. Please see the link below about how to install only a specific
tool.
4697 » How do I install specific administration tools from Adminpak.msi?
http://www.jsiinc.com/subj/tip4600/rh4697.htm
--
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
"Edward Lee" <elee@ulgm.org> skrev i meddelandet
news:OMTxOdtAEHA.3988@tk2msftngp13.phx.gbl...
- Posted by Edward Lee on March 5th, 2004
Thank you Chris. Hope you don't mind a few follow-up questions...
1. The article you referenced mentions Windows 2000. Is this the same for
Windows 2003?
2. What permissions do I need to grant the account that will be creating AD
users?
3. Can I give this account the ability to add, delete, and modify only AD
users in a particular organizational unit?
Thanks again,
Ed Lee
"Chriss3" <noSpamHere@chrisse.se> wrote in message
news:%23ydoOiuAEHA.392@TK2MSFTNGP12.phx.gbl...
- Posted by Chriss3 on March 5th, 2004
Edward here is the answers!
1. ) It should be the same for the adminpack.msi updated version included in
Windows Server 2003.
2.) Create right in the particular OU
3.) Yes, take use of the Delegate of Control Wizard:
Step-by-Step Guide to Using the Delegation of Control Wizard:
http://www.microsoft.com/windows2000...delegsteps.asp
(Delegate of Control appears in Windows 2003 as well)
Have a nice weekend.
--
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
"Edward Lee" <elee@ulgm.org> skrev i meddelandet
news:%23R3NEGvAEHA.640@TK2MSFTNGP09.phx.gbl...
- Posted by Ulf B. Simon-Weidner [MVP] on March 5th, 2004
Edward Lee says...
1. it's the same for WS2k3
2.+3. if you use the delegation wizard (right click on the ou, then delegate)
you are able to delegate to manage user-accounts. Delegate this right to a
group and they'll be able to just create, manage and delete user accounts
underneath that specific OU.
Gruesse - Sincerely,
Ulf B. Simon-Weidner
- Posted by Edward Lee on March 5th, 2004
Chris, Ulf,
Thanks!! I'm going to go give this a try right now.
Ed Lee
"Ulf B. Simon-Weidner [MVP]" <nospam2-ulf@usw-consulting.com> wrote in
message news:MPG.1ab3061829acfd25989a72@msnews.microsoft.c om...
- Posted by Edward Lee on March 5th, 2004
It worked perfectly. I came across a corrupt roaming profile which
frustrated my efforts for a while. I deleted and recreated the profile
directory and it solved about 10 other problems the user was having.
Anway, thanks for the quick and informative advice!!
Ed Lee
"Edward Lee" <elee@ulgm.org> wrote in message
news:uwrZepvAEHA.464@TK2MSFTNGP11.phx.gbl...
- Posted by Ulf B. Simon-Weidner [MVP] on March 6th, 2004
Edward Lee says...
glad it worked!
Gruesse - Sincerely,
Ulf B. Simon-Weidner