Share via

Domain Admins permission delegation

brichardi 331 Reputation points
2021-02-04T20:58:01.317+00:00

Hello all,

We have been told by our Security department to remove all Engineers from the "Domain Admin" group. How can I delegate permission to our Engineers to operate like "Domain Admins" without being added to DA group.

I know how to delegate permission to helpdesk to add/delete/modify users, and group, but delegate permission to Engineers to work on AD, DNS, GPOs, Site replication, etc is too complex and I just can't figure out how to do this.

Thanks for your help.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,722 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,865 questions
Windows Server Infrastructure
Windows Server Infrastructure
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Infrastructure: A Microsoft solution area focused on providing organizations with a cloud solution that supports their real-world needs and meets evolving regulatory requirements.
554 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Fan Fan 15,356 Reputation points Microsoft Vendor
    2021-02-05T08:33:27.443+00:00

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.