What are the minimum powers required to create computer accounts in Directory and Resource Administr (NETIQKB5437)

  • 7705437
  • 02-Feb-2007
  • 19-Jun-2007

Resolution

goal
What are the minimum powers required to create computer accounts in Directory and Resource Administrator (DRA)?

fact
Directory and Resource Administrator 6.x

fact
Directory and Resource Administrator 7.x

fix

In order for the Assistant Admin to create computer accounts within DRA, they would need either the Built-in ResourceCreate role or the All properties-Create a computer account power.

In addition, verify that the assigned ActiveView includes the following rules:

  • A custom rule to include all computers.
  • A rule for target container for create operations.

Optionally, you could add a rule to exclude all Domain Controllers if the intent is to not allow the Assistant Admins to see Domain Controllers.



Additional Information

Formerly known as NETIQKB5437