Yes Bob. Robert Tannehill <rtannehill@xxxxxxx> wrote: Srini, So, you want to be able to grant users ability to admin the SO group without giving them SO rights? Bob --------------------------------- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of srini_08872@xxxxxxxxx Sent: Thursday, October 12, 2006 9:48 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Server Operator BuiltinGroup Bob, If i'm able to grant user mgmt group to administer "SO" group members that solves my problem. thanks Srini Bobby T <bob@xxxxxxxxxxxxxxxxxx> wrote: Srini So, if I'm understanding you, you're trying to give the User Management group ability to manage "SO" users, with out giving them all the SO rights? Or am I still missing what you're trying to solve? Bob _____ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Sirini k Sent: Wednesday, October 11, 2006 7:46 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Server Operator BuiltinGroup Thanks Bob, But that will not solve my problem, it only controls the membership of the SO group ,let me explain my requirement: Our's is huge user base account where all user management is done thru user management group and these members are less privileged admins than SO, they can't reset the member accounts of server operators group due to Server operators Dacl is Protected by PDCE and i don't want to give the user management group a higher privileges than the present one. Secondly we are don't want to use any butilin groups, we wanted to fine tune the Roles for admin tasks and grant proper permission's & previlalges to these roles. Srini Bobby T wrote: Srini, Perhaps another way to do this is to create a security group and then make it Resticted to the Server Operators via GPO. That is, if you need to control who's in that group, you can do it with a security group, then place permissions on the security group to control who is place in it. Not sure if that will solve your problem.. Bob _____ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Sirini k Sent: Monday, October 09, 2006 4:45 PM To: gptalk@xxxxxxxxxxxxx Cc: srini_08872@xxxxxxxxx Subject: [gptalk] Server Operator BuiltinGroup Greetings, I have a very basic knowledge on GPO and I'm reaching to this community to find an answer to my question /doubt. I'm need of a security group which has similar permissions and privileges granted to Built-in Server operator group in Windows 2003 AD. Basically I don't want to use the built-in group but rather create a new group and grant this group all permissions and privileges granted to built-in Server operators group can this is achievable thru GPO, if so can some one guide me plz if not what are reasons it can't be done. Highly appreciate any inputs on this topic, Many thanks in advance Srini _____ Want to be your own boss? Learn how on Yahoo! Small Business. _____ Yahoo! Messenger with Voice. Make t=39663/*http://voice.yahoo.com> PC-to-Phone Calls to the US (and 30+ countries) for 2¢/min or less. --------------------------------- Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ countries) for 2¢/min or less. --------------------------------- Get your own web address for just $1.99/1st yr. We'll help. Yahoo! Small Business.