How to Create Level wise policy for IT Admin

Question

I have a query like we have 15 engineers where 8 engineers are Level 1 engineers 4 are level 2 and 3 are level 3 engineers.

I want to create level wise policies for 3 different groups

Like level 1 engineers can not reset passwords for level 2 and level 3.

Level 2 can reset for level 1 but not for level 3

Level 3 can reset for level 1 and level 2 but no of any engineers of level 3 and above.

Answer 1

Hello

Thank you for posting in Q&A forum.

Active directory have permission page, it can allow you to control people to change/reset password or not.

For done this, you can open Active Directory Users and Computers. and move three level of user in different OU.

And then right click this 3 level OU >>> Properties >>> Security >>> Advanced >>> Add >>> Principal choose 1 level user >>> Type choose Deny >>> Applies to choose Descendant User Objects >>> Click Clear all at the end of the page >>> make sure Change password and reset password is been select >>> click ok and close permission page.

Now 1 level user can't change and reset password to 3 Level OU, you can follow this step to set the next permission

Best regards

Yanhong

=====================================

If the answer is helpful, please click "Accept answer" and upvote it