locked
ADUC Communications tab w/o full admin tool kit install RRS feed

  • Question

  • Is there a way to give a user the ability to use the Communications tab in ADUC without installing the entire admin tool kit ?    I want our security department to be able to configure and enable users but I don't want them to manage the servers.

     

     

    Tuesday, November 18, 2008 5:06 PM

Answers

  • This has come up before but I don't think anyone was looked for a way to identify the files and register the required DLL(s) for the ADUC tab.

     

    That said, the proper way to configure this is to delegate permissions to the users you want for the specific tasks you want, blocking access to the Management console doesn't actually prevent users from executing those server administration tasks.

     

    http://blogs.pointbridge.com/Blogs/schertz_jeff/Pages/Post.aspx?_ID=40

     

     

    Tuesday, November 18, 2008 5:32 PM
    Moderator

All replies

  • This has come up before but I don't think anyone was looked for a way to identify the files and register the required DLL(s) for the ADUC tab.

     

    That said, the proper way to configure this is to delegate permissions to the users you want for the specific tasks you want, blocking access to the Management console doesn't actually prevent users from executing those server administration tasks.

     

    http://blogs.pointbridge.com/Blogs/schertz_jeff/Pages/Post.aspx?_ID=40

     

     

    Tuesday, November 18, 2008 5:32 PM
    Moderator
  • Thanks for the quick reply Jeff.      This is the direction I'm looking for.   Since these users are in the security department they have the ability to add themsleves to most groups.   I'm sure that they'll do the right thing , but I'm just looking for a way to limit the potential of damage by idle or curious folks.    

     

     

     

    Tuesday, November 18, 2008 8:26 PM