Security Basics: Re: local admin/ domain admin

[shaheedpak () gmail com]

You can use windows admin kit and install the aduc snap in on an XP machine that way you won't have to give away admin 
pwd 
Sent via BlackBerry from T-Mobile  

-----Original Message-----
From: "Sohail Sarwar" <ssarwar () ecredit com>
Date: Tue, 6 Mar 2007 13:33:05 
To:"WALI" <hkhasgiwale () gmail com>,<security-basics () securityfocus com>
Subject: local admin/ domain admin

Hi Guys,

        I want to create an administrator account on the domain for my
helpdesk persons.  I basically want them to only add machines to the
domain, and add user accounts for new employees with the option to
change their passwords.  Basically, I want do not want to give them the
administrators password.. and control what be done potentially and
accidentally...  Can some one assist and let me know how I can do that?
Or provide me the procedures.  Any guidance would be great!

Regards,
Sohail