Click here to get back home

Enable / Disable users permission

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Enable / Disable users permission Eldad 06-22-2008
Get Chitika Premium
Posted by Eldad on June 22, 2008, 7:09 am
Please log in for more thread options
Hi,
Is there an option to let specific user the option to enable / disable other
users account, where the permit users cant be locate in administrators user
group.
I'm using server 2003, stand alone
Thanks,



Posted by Daniel Petri on June 22, 2008, 7:23 am
Please log in for more thread options
If it's a stand alone machine then the managing user needs to be part of the
local administrators group. In an AD-based environment you'd have many more
options (account operators, delegation and so on).

--
Sincerely,

Daniel Petri
MVP, Senior IT consultant, trainer
www.petri.co.il


> Hi,
> Is there an option to let specific user the option to enable / disable
> other users account, where the permit users cant be locate in
> administrators user group.
> I'm using server 2003, stand alone
> Thanks,
>


Posted by Meinolf Weber on June 22, 2008, 7:31 am
Please log in for more thread options
Hello Eldad,

Rightclick the OU where the user accounts are located that you like to
enable/disable.
Choose delegate control wizard, select the user or group with the accounts,
that should get the ability, click next, select create custom task, press
next, choose Only the following objects, scroll down to user objects, check
mark and press next, check General and scroll down to Read and write Account
restrictions. Next and finish.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi,
> Is there an option to let specific user the option to enable / disable
> other
> users account, where the permit users cant be locate in administrators
> user
> group.
> I'm using server 2003, stand alone
> Thanks,



Posted by Daniel Petri on June 22, 2008, 7:49 am
Please log in for more thread options
Ahmmm... he said "stand alone"... :-)

--
Sincerely,

Daniel Petri
MVP, Senior IT consultant, trainer
www.petri.co.il

> Hello Eldad,
>
> Rightclick the OU where the user accounts are located that you like to
> enable/disable. Choose delegate control wizard, select the user or group
> with the accounts, that should get the ability, click next, select create
> custom task, press next, choose Only the following objects, scroll down to
> user objects, check mark and press next, check General and scroll down to
> Read and write Account restrictions. Next and finish.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hi,
>> Is there an option to let specific user the option to enable / disable
>> other
>> users account, where the permit users cant be locate in administrators
>> user
>> group.
>> I'm using server 2003, stand alone
>> Thanks,
>
>


Posted by Meinolf Weber on June 23, 2008, 3:07 pm
Please log in for more thread options
Hello Daniel,

Oooopppsss, didn't read careful enough. :-)

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Ahmmm... he said "stand alone"... :-)
>
> Daniel Petri
> MVP, Senior IT consultant, trainer
> www.petri.co.il
>
>> Hello Eldad,
>>
>> Rightclick the OU where the user accounts are located that you like
>> to enable/disable. Choose delegate control wizard, select the user or
>> group with the accounts, that should get the ability, click next,
>> select create custom task, press next, choose Only the following
>> objects, scroll down to user objects, check mark and press next,
>> check General and scroll down to Read and write Account restrictions.
>> Next and finish.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi,
>>> Is there an option to let specific user the option to enable /
>>> disable
>>> other
>>> users account, where the permit users cant be locate in
>>> administrators
>>> user
>>> group.
>>> I'm using server 2003, stand alone
>>> Thanks,



Similar ThreadsPosted
exchange re-enable disable account 1022 September 29, 2006, 10:54 am
Giving users permission to an MMC June 23, 2005, 11:01 am
How to reset the permission on the "USERS" share June 5, 2008, 2:56 pm
disable ip address June 14, 2005, 3:17 pm
Port Disable January 2, 2007, 11:20 pm
Disable ALL Lan Manager Authentication September 20, 2005, 7:15 am
Permanently disable SMB signing February 22, 2006, 8:09 pm
How to disable Media Pooling? June 8, 2006, 3:53 pm
i want to enable the windows firewall on a DC October 28, 2005, 5:37 am
Can't enable Certificate Template??? May 25, 2006, 5:03 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap