RIGHTS

I have a problem with domain account. I want to give
someone the ability to create, delete and modify domain
accounts (NT4 Environment) but at the same time remove
access to restart servers and services. Can this been
done without having them added to Domain Admins group?

Offtopic Question: I want to give someone rights to
create, delete and modify email accounts, but I dont want
to give them access to view mailboxes. How can this be
done using Exchange 5.5 and a Windows NT 4.0 domain. (I
know I know we're going to AD soon)

Joe
Tue Oct 05 19:00:35 CDT 2004

Wow NT4, that is going back a while....


The first can be done with account ops access.

Shouldn't have access to restart servers/services but if they do, you can change
the ACLs on the services and remove the right to restart the servers in the
rights management.

I don't think you can do the second in 5.5. I think you need Exchange admin to
do that and an exchange admin can open mailboxes. Windows 2000 and Exchange 2000
and that is a different story.





--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net



Phillip wrote:
> I have a problem with domain account. I want to give
> someone the ability to create, delete and modify domain
> accounts (NT4 Environment) but at the same time remove
> access to restart servers and services. Can this been
> done without having them added to Domain Admins group?
>
> Offtopic Question: I want to give someone rights to
> create, delete and modify email accounts, but I dont want
> to give them access to view mailboxes. How can this be
> done using Exchange 5.5 and a Windows NT 4.0 domain. (I
> know I know we're going to AD soon)