Click here to get back home

Delegating Admin Rights in Windows 2003

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Delegating Admin Rights in Windows 2003 Cindy 09-25-2007
Posted by Cindy on September 25, 2007, 2:40 pm
Please log in for more thread options
I need to know what permissions are necessary to have a delegated admin
create shares on folders.
--
Cindy C.

Posted by jwgoerlich on September 27, 2007, 9:49 am
Please log in for more thread options
The following allows non-admins to manage shared folders. Create a
local group, such as "Share Operators". Download and install TweakUI.
Open TweakUI and click Access Control. Grant "Share Operators" full
control over the following items:

Manage file and print sharing
Manage file/print server connections
Enumerate file server disks
Manage file server open files
Manage file/print server sessions
Manage administrative shares
Manage file shares
Manage printer shares
Read file/print server statistics

Reboot the computer. To delegate access to manage shared folders, make
the person a member of this "Share Operators" group. Note that all of
the above permissions may grant more than the person actually needs.
This is simply the list I use. Feel free to experiment by removing the
group from one permission at a time, rebooting, and seeing how
person's access changes.

Regards,

J Wolfgang Goerlich


Related Links:

Microsoft PowerToys for Windows XP
http://www.microsoft.com/windowsxp/downloads/powertoys/xppowertoys.mspx


> I need to know what permissions are necessary to have a delegated admin
> create shares on folders.
> --
> Cindy C.



Posted by Cindy on October 2, 2007, 1:53 pm
Please log in for more thread options
Thank you.
--
Cindy C.


"jwgoerlich@gmail.com" wrote:

> The following allows non-admins to manage shared folders. Create a
> local group, such as "Share Operators". Download and install TweakUI.
> Open TweakUI and click Access Control. Grant "Share Operators" full
> control over the following items:
>
> Manage file and print sharing
> Manage file/print server connections
> Enumerate file server disks
> Manage file server open files
> Manage file/print server sessions
> Manage administrative shares
> Manage file shares
> Manage printer shares
> Read file/print server statistics
>
> Reboot the computer. To delegate access to manage shared folders, make
> the person a member of this "Share Operators" group. Note that all of
> the above permissions may grant more than the person actually needs.
> This is simply the list I use. Feel free to experiment by removing the
> group from one permission at a time, rebooting, and seeing how
> person's access changes.
>
> Regards,
>
> J Wolfgang Goerlich
>
>
> Related Links:
>
> Microsoft PowerToys for Windows XP
> http://www.microsoft.com/windowsxp/downloads/powertoys/xppowertoys.mspx
>
>
> > I need to know what permissions are necessary to have a delegated admin
> > create shares on folders.
> > --
> > Cindy C.
>
>
>

Similar ThreadsPosted
How2: User Rights on Domain but Admin Rights on Computer December 20, 2006, 3:40 pm
Problem delegating control January 18, 2008, 10:17 am
Admin rights September 5, 2006, 11:27 am
A question regarding admin rights and passwords for sbs November 30, 2005, 7:36 pm
new forms on print server without admin rights February 10, 2006, 9:51 am
Domain Users to have Local Admin rights April 28, 2006, 3:17 pm
Rights to allow non admin to close other users' files March 6, 2008, 6:18 am
Need limited domain admin rights user account. August 8, 2005, 2:33 pm
Terminal services-give a program admin rights January 10, 2006, 4:14 pm
Allowing a Domain User Admin Rights to a Couple of Domain Servers June 29, 2005, 8:13 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap