Allowing junior Network Admins to do their job

5 pts.
Tags:
Active Directory
Change management
GPO
Group Policy
Network administration
Network Administrator
Network configuration management
Systems administration
Hello, I need to allow some it staff to be able to add computers to the domain, install software on all systems and be full local admins on every box in the domain. Can you suggest a way to do this via gpo? or script? - or both? Thanks !

Answer Wiki

Thanks. We'll let you know when a new response is added.

There are a number of separate bits here.

Allowing a group to install software is partly a gpo user rights assignment issue, but you are right that you also want to make them local administrators. On our network this is done through a batch script run at logon with the line

net localgroup Administrators <i>domain\group </i>/add

I’m sure there are better ways to do this but although this is clunky it works.

Finally giving them the rights and tools to add computers is done through AD users and computers by right-clicking the OU (or domain) and choosing delegate control. The wizard takes you through the whole process and produces a console which you can distribute to your users. Take care with the options on the console to make sure they can’t open it in “author” mode which might allow them to extend their powers but otherwise I’ve found this method an excellent one for all kinds of delegation.

Discuss This Question:  

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following