<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>to all who replied to my request, i thank you a lot , you advises where really helpful, i thank you very much<BR><BR><BR><BR>
<BLOCKQUOTE>
<HR id=EC_stopSpelling>
From: joel@helgeson.com<BR>To: nadtec@hotmail.com; bugtraq@securityfocus.com; full-disclosure@lists.grok.org.uk<BR>Subject: RE: [Full-disclosure] need help in managing administrators<BR>Date: Sun, 2 Dec 2007 21:19:10 -0600<BR><BR>
<META content="Microsoft SafeHTML" name=Generator>
<STYLE>
.ExternalClass .EC_shape
{;}
</STYLE>
<STYLE>
.ExternalClass EC_p.MsoNormal, .ExternalClass EC_li.MsoNormal, .ExternalClass EC_div.MsoNormal
{margin-bottom:.0001pt;font-size:12.0pt;font-family:'Times New Roman','serif';}
.ExternalClass a:link, .ExternalClass EC_span.MsoHyperlink
{color:blue;text-decoration:underline;}
.ExternalClass a:visited, .ExternalClass EC_span.MsoHyperlinkFollowed
{color:purple;text-decoration:underline;}
.ExternalClass p
{margin-right:0in;margin-left:0in;font-size:12.0pt;font-family:'Times New Roman','serif';}
.ExternalClass EC_span.EmailStyle18
{font-family:'Calibri','sans-serif';color:#1F497D;}
.ExternalClass .EC_MsoChpDefault
{font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;}
.ExternalClass EC_div.Section1
{page:Section1;}
</STYLE>
<DIV class=EC_Section1>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">Launch “Active Directory Users & Computers”</SPAN></P>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">Listed you have the AD containers used to hold all your objects, select a tree, right-click the container, click properties. There is a tab called “Delegate Control” where you can delegate management of the objects located in that container to whatever groups or individuals you want. It is best to create a user group, then delegate the control to the group rather than the user.</SPAN></P>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"><BR>This is where it is important that you have your AD containers set up properly…</SPAN></P>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"> </SPAN></P>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">Hope that helps provide some direction…</SPAN></P>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"> </SPAN></P>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">Joel Helgeson</SPAN></P>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"> </SPAN></P>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"> </SPAN></P>
<DIV>
<DIV style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; PADDING-LEFT: 0in; PADDING-BOTTOM: 0in; BORDER-LEFT: medium none; PADDING-TOP: 3pt; BORDER-BOTTOM: medium none">
<P class=EC_MsoNormal><B><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'">From:</SPAN></B><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'"> full-disclosure-bounces@lists.grok.org.uk [mailto:full-disclosure-bounces@lists.grok.org.uk] <B>On Behalf Of </B>happy nino<BR><B>Sent:</B> Sunday, December 02, 2007 3:42 AM<BR><B>To:</B> bugtraq@securityfocus.com; full-disclosure@lists.grok.org.uk<BR><B>Subject:</B> [Full-disclosure] need help in managing administrators</SPAN></P></DIV></DIV>
<P class=EC_MsoNormal> </P>
<BLOCKQUOTE style="MARGIN-BOTTOM: 5pt">
<P class=EC_MsoNormal style="MARGIN-BOTTOM: 12pt"><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'"> </SPAN></P>
<P class=EC_MsoNormal style="MARGIN-BOTTOM: 12pt"><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'">Hi All,<BR>i've a problem in my organization that we have several domain admins, we are in the process of removing most of them but i need to have a person only authorized to install<BR>new software to users' computers but without having access to other parts of the users machines, is this possible ?..can i delegate a function like this only to certain users with out<BR>being domain admins?<BR>Appreciate your great help<BR>thanks alot <BR><BR>regards,<BR>Nad<BR><BR><BR> </SPAN></P></BLOCKQUOTE>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'"> </SPAN></P>
<DIV class=EC_MsoNormal style="TEXT-ALIGN: center" align=center><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'">
<HR align=center width="100%" SIZE=2>
</SPAN></DIV>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'">Get closer to the jungle. <A href="http://entertainment.uk.msn.com/tv/realitytv/im-a-celebrity/" target=_blank>I'm a Celebrity Get Me Out Of Here!</A></SPAN></P></DIV></BLOCKQUOTE><br /><hr />The next generation of MSN Hotmail has arrived - <a href='http://www.newhotmail.co.uk' target='_new'>Windows Live Hotmail</a></body>
</html>