Who and how can create users besides administrator?

Discussion in 'Security Software' started by sciphi, Oct 26, 2005.

  1. sciphi

    sciphi Guest

    This may seem like a terribly basic question, but the search terms I've tried
    have not given me an answer. Here's the closest thing I've found:

    "In Windows 2003 Server using Active Directory, 'a department administrator
    could be declared, who could create users and add computers to a domain
    within their department without having administrative access the the whole
    domain.'"

    Now, I would like to know about a server that is not in a domain. We need
    for a customer to be able to create users on this server, but without having
    administrative access to this server. How can I give them enough rights to do
    just that?

    Thanks.
     
    sciphi, Oct 26, 2005
    #1
    1. Advertisements

  2. I don't think you can at the local level.

    --
    Phillip Windell [MCP, MVP, CCNA]
    www.wandtv.com
    -----------------------------------------------------
    Understanding the ISA 2004 Access Rule Processing
    http://www.isaserver.org/articles/ISA2004_AccessRules.html

    Microsoft Internet Security & Acceleration Server: Guidance
    http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
    http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

    Microsoft Internet Security & Acceleration Server: Partners
    http://www.microsoft.com/isaserver/partners/default.asp
    -----------------------------------------------------
     
    Phillip Windell, Oct 26, 2005
    #2
    1. Advertisements

  3. sciphi

    sciphi Guest

    Thanks. So, it can be done if it is on a domain? The developer/test Windows
    2000 server is not on a domain, but the production Windows 2003 server might
    be set up that way, especially if there were some impetus for it.

    Can you give me a clue where to find an article or something on how to set
    this up on a domain? Can the person who creates the users grant rights
    greater than his/her own?


     
    sciphi, Oct 26, 2005
    #3
  4. Members of the power users group can create and manage user accounts that
    they create though they can not create nor manage administrator accounts.
    Power users also can install a lot of software and create shares but can not
    configure tcp/ip or most critical system settings like running Local
    Security Policy. --- Steve
     
    Steven L Umbach, Oct 26, 2005
    #4
  5. On a Domain there is a Account Operators group that might serve the purpose.

    --
    Phillip Windell [MCP, MVP, CCNA]
    www.wandtv.com
    -----------------------------------------------------
    Understanding the ISA 2004 Access Rule Processing
    http://www.isaserver.org/articles/ISA2004_AccessRules.html

    Microsoft Internet Security & Acceleration Server: Guidance
    http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
    http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

    Microsoft Internet Security & Acceleration Server: Partners
    http://www.microsoft.com/isaserver/partners/default.asp
    -----------------------------------------------------


     
    Phillip Windell, Oct 26, 2005
    #5
  6. sciphi

    sciphi Guest

    Thanks very much. I looked up the Power Users permissions listed in the
    Computer Management area, and didn't see the creation of accounts listed.

     
    sciphi, Oct 26, 2005
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.