Customized role based access to windows user

Question

I am trying to figure out a way to provide access to few user who have few administrative right like to make changes to system files and only access to certain application for eg : SQL server.Is there a way to do it.

Please Note : I'm setting this up on active directory windows servers 2019. It is for an organizational purpose indeed for multiple systems in the domain.

Answer 1

Hello there,

Have you created an OU?

It is recommended to designate a specific OU to hold all subordinate AD Bridge joined systems and that delegation is granted over this OU. This is the preferred method since scoping the location for an account to create computer objects in the domain is more secure.

You can use organizational units (OUs) to delegate the administration of objects, such as users or computers, within the OU to a designated individual or group. To delegate administration by using an OU, place the individual or group to which you are delegating administrative rights into a group, place the set of objects to be controlled into an OU, and then delegate administrative tasks for the OU to that group.

You can dig deeper here https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/delegating-administration-by-using-ou-objects

-------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–