Question : Active Directory Administration

I would like to give the HelpDesk department the ability to ONLY add, delete, modify user accounts and machine accounts in our active directory domain without any additional privelages.

Is there a special group i can create or add their domain IDs too that will allow this ?

They should not be able to Rename or delete OUs or modify any additional AD information.

Answer : Active Directory Administration

There is no built in group with the restrictions that you want - but you can create a new group, put the users into it and then use the delegation of cotrol wizard to delegate to the group
http://www.activewin.com/win2000/step_by_step/active_directory/delegsteps.shtml
Random Solutions  
 
programming4us programming4us