RE: local admin/ domain admin

["Quigley, Joe" <Joe.Quigley () informausa com>]

Best Practices for Delegating Active Directory Administration

http://www.microsoft.com/downloads/details.aspx?familyid=631747a3-79e1-4
8fa-9730-dae7c0a1d6d3&displaylang=en 

Regards,

jq
-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Sohail Sarwar
Sent: Tuesday, March 06, 2007 1:33 PM
To: WALI; security-basics () securityfocus com
Subject: local admin/ domain admin

Hi Guys,

        I want to create an administrator account on the domain for my
helpdesk persons.  I basically want them to only add machines to the
domain, and add user accounts for new employees with the option to
change their passwords.  Basically, I want do not want to give them the
administrators password.. and control what be done potentially and
accidentally...  Can some one assist and let me know how I can do that?
Or provide me the procedures.  Any guidance would be great!

Regards,
Sohail