I would like to to allow the "Domain Power Users" group the ability to

change membership for only certain security groups on our SBS2003 domain.

For instance, I have created a "sales", "info" &  "accounts" group. I would

like "Domain Power Users" only to be able to change membership for "sales" &

"info". How can I do this?



Thanks.

omb wrote:



> I would like to to allow the "Domain Power Users" group the ability to

> change membership for only certain security groups on our SBS2003 domain.

> For instance, I have created a "sales", "info" &  "accounts" group. I

would

> like "Domain Power Users" only to be able to change membership for

"sales" &

> "info". How can I do this?

>

> Thanks.



You can't. But you can make an individual person the "Manager" of the

group, and then they will be able to modify the group membership using

Outlook.



--

Steve Foster [SBS MVP]

---------------------------------------

MVPs do not work for Microsoft. Please reply only to the newsgroups.

It can be done.

Create a new OU, add the security groups you wish to manage to that OU.  Then delegate control to modify group membership for that OU.




	
Quote:
	

	

		

			
				Originally posted by Steve Foster [SBS MVP] 

omb wrote:



> I would like to to allow the "Domain Power Users" group the ability to

> change membership for only certain security groups on our SBS2003 domain.

> For instance, I have created a "sales", "info" &  "accounts" group. I

would

> like "Domain Power Users" only to be able to change membership for

"sales" &

> "info". How can I do this?

>

> Thanks.



You can't. But you can make an individual person the "Manager" of the

group, and then they will be able to modify the group membership using

Outlook.



--

Steve Foster [SBS MVP]

---------------------------------------

MVPs do not work for Microsoft. Please reply only to the newsgroups. 
			
		
	
	

Hi slister



I've tried what you said, but it didn't work. Am I doing something wrong?



I created a new OU called AdminRights. Moved the relevant security group in.

Then assigned delegation to the "Administrators" group, allowing them to

modify group membership.



Logging on as a user not part of the Administrators group, but Domain Power

Users, they still were able to change the group's membership.



Any ideas?

Hi slister



I've tried what you said, but it didn't work. Am I doing something wrong?



I created a new OU called AdminRights. Moved the relevant security group in.

Then assigned delegation to the "Administrators" group, allowing them to

modify group membership.



Logging on as a user not part of the Administrators group, but Domain Power

Users, they still were able to change the group's membership.



Any ideas?