Grant access to modify membership of local administrator group

hello

i active directory administrator , grant user access modify membership of local administrator group computers in specific ou only. tried via delegation of control modify membership of group, when tries modify administrators group of 1 computer on ou, gets message access denied. there way other delegation of control.

hi,

according description, want grant right modify local administrator group membership on computers belong 1 specific ou through aduc, right?

i don’t think possible via delegate control, since local administrator group membership can modified local administrator on local machine, did grant right modify group membership of specific ou, means adding/deleting members within ou.

in other words, need add user local administrator group on local machines achieve goal.

best regards,

amy

Windows Server  >  Security