Access to ADUC only

[guv]

I want to give some users access to AD user and computers on their PC's for
them to administer a specific OU. I want them to unlock accounts for users
under this specific OU.

I have setup a msc file which gives them access to the OU by restricting
access by giving them limited access to a single window. I have delegated
control on the OU as well so that they can unlock accounts only.

I copied the msc file onto their PC's but when they open the file it says
cannot open file.
I dont want to install the adminpak.msi as this will give them access to all
other AD tools even though they dont have permissions. But I do not want
them to see the tools.

Is there a way I can get them to access to AD users and computer and
preferably with that specific OU view only.

 

[Danny Sanders]

Re: Access to ADUC only

This article details how to install only specific admin tools using
adminpak.
See:
http://support.microsoft.com/kb/314978/en-us

hth
DDS


"guv" <guv@> wrote in message news:OSffqL03HHA.5796@TK2MSFTNGP05.phx.gbl...
>I want to give some users access to AD user and computers on their PC's for
>them to administer a specific OU. I want them to unlock accounts for users
>under this specific OU.
>
> I have setup a msc file which gives them access to the OU by restricting
> access by giving them limited access to a single window. I have delegated
> control on the OU as well so that they can unlock accounts only.
>
> I copied the msc file onto their PC's but when they open the file it says
> cannot open file.
> I dont want to install the adminpak.msi as this will give them access to
> all other AD tools even though they dont have permissions. But I do not
> want them to see the tools.
>
> Is there a way I can get them to access to AD users and computer and
> preferably with that specific OU view only.
>