+ Post New Thread
Results 1 to 12 of 12
Windows Thread, give staff member control over group of users in Technical; I want to give a member of staff control over a group of students in active directory, such as change ...
  1. #1

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,512
    Thank Post
    1,320
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199

    give staff member control over group of users

    I want to give a member of staff control over a group of students in active directory, such as change password etc.

    Is there a Microsoft mmc that can be used on their local machine or does it require a 3rd party utility.

    Also, what groups do I need to add this staff member to so they can control only the specified group and not the entire domain?

  2. #2
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    Hi

    You can do this but I would not advice it. You would have to create ou's in users and computers and then populate them move the users and computers you want them to control. Then you would have to deligate control to that person. I have seen this done in business but never in education.

    Richard

  3. #3

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,118
    Thank Post
    215
    Thanked 1,236 Times in 784 Posts
    Blog Entries
    4
    Rep Power
    502
    Its fine to do, but you need to make sure your permissions are properly set, and customize the mmc highly to make sure they only get the items they're supposed to.

    The other thing is, i think (though I'm not 100 percent) you need the network admin tools pack installed wherever it'll be used.

    I'd personally spend the time setting up a self-service password reset.

  4. #4

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,512
    Thank Post
    1,320
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    Quote Originally Posted by ricki View Post
    Hi

    You can do this but I would not advice it. You would have to create ou's in users and computers and then populate them move the users and computers you want them to control. Then you would have to delegate control to that person. I have seen this done in business but never in education.

    Richard
    The users I want the member of staff to have control over are already in the one OU.

    How do I delegate control?

  5. #5

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,512
    Thank Post
    1,320
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    Quote Originally Posted by Domino View Post
    Its fine to do, but you need to make sure your permissions are properly set, and customize the mmc highly to make sure they only get the items they're supposed to.

    The other thing is, i think (though I'm not 100 percent) you need the network admin tools pack installed wherever it'll be used.

    I'd personally spend the time setting up a self-service password reset.
    Does the network admin tools pack contain the mmc that they will use?

    It is the head of primary that is wanting the control, its the juniors accounts he will be doing this for, they are probably too young to manage a self-service thing.

  6. #6

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,118
    Thank Post
    215
    Thanked 1,236 Times in 784 Posts
    Blog Entries
    4
    Rep Power
    502

  7. #7

    Join Date
    May 2008
    Posts
    25
    Thank Post
    2
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Quote Originally Posted by RabbieBurns View Post
    The users I want the member of staff to have control over are already in the one OU.

    How do I delegate control?
    Right-click on the OU and Delegate Control is your top option. Be sure this is what you want to do though. It sounds simple, but teachers have a way of destroying networks

  8. #8

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,512
    Thank Post
    1,320
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    Thanks

    Im at the download page for the server administration pack

    Download details: Windows Server 2003 R2 Administration Tools Pack (x86)

    This guy is also one of only 2 computers in the whole school that uses vista.

    Does the admin pack work on vista does anyone know?

  9. #9

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,512
    Thank Post
    1,320
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    actually I dont think those are the ones that I want

  10. #10


    Join Date
    Sep 2008
    Posts
    1,748
    Thank Post
    320
    Thanked 258 Times in 211 Posts
    Rep Power
    119
    On a side note to this, is it possible to allocate permissions for OU so that you can have people apply group policies, but only on that OU?

    For example allowing the technology technician control over their computers? We have a technology technician who was taken on to assist with all the technology department including computers. However, they have never touched the computers and now the network has grown I would like to push more work back in their direction. They started before I did so it was never picked up, but I would like to distribute some of the work now.

    In this case I dont want to allow full access to group policies for the whole network, but they can do what they want (within reason) to the computers they are supposed to look after. So could I set up a standard policy with no override and then let the technician look after the software on their computers?

    I understand the potential issues that could arise, but if this is possible then at least I could highlight the problem of my workload with a solution to SMT. I would be willing to train them so they had an understanding of how to deploy software etc, but the only other solution would be to employ a 2nd techie and that wont happen. So this is me grasping at straws. Any advice?

  11. #11
    wagnerk's Avatar
    Join Date
    Jun 2007
    Location
    Northants
    Posts
    801
    Thank Post
    63
    Thanked 165 Times in 134 Posts
    Rep Power
    46
    After you use the delegation of Control wizard in ad, instead of installing the admin pack for XP, you can install this program. They get what they need to do it, nothing more, nothing less.

    Quote Originally Posted by RabbieBurns View Post
    ...Does the admin pack work on vista does anyone know?
    No, but there is a work around if you really want the XP admin pack on Vista, but it's not 100% compatible. However I would recommend using RSAT for Vista, this is the new version of the XP admin pack that is designed for Vista.

    -Ken
    Last edited by wagnerk; 4th November 2008 at 03:06 PM. Reason: formatting/grammer

  12. #12

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,512
    Thank Post
    1,320
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    Quote Originally Posted by wagnerk View Post
    After you use the delegation of Control wizard in ad, instead of installing the admin pack for XP, you can install this program. They get what they need to do it, nothing more, nothing less.



    No, but there is a work around if you really want the XP admin pack on Vista, but it's not 100% compatible. However I would recommend using RSAT for Vista, this is the new version of the XP admin pack that is designed for Vista.

    -Ken
    That wisesoft thing looks the business. Thanks.

    I cant seem to find the section on the website to get a free code though, even after registering with the site?

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 5
    Last Post: 28th February 2008, 04:57 PM
  2. Remote Control Users By Username
    By mmoseley in forum Network and Classroom Management
    Replies: 15
    Last Post: 11th July 2007, 08:50 AM
  3. Vista UAC - User Access Control
    By Nij.UK in forum Windows Vista
    Replies: 17
    Last Post: 6th June 2007, 10:19 AM
  4. Replies: 16
    Last Post: 9th March 2007, 03:03 PM
  5. Moving Users to a New Group and Removing them from the old
    By ninjabeaver in forum How do you do....it?
    Replies: 5
    Last Post: 6th December 2006, 11:48 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •