Creating Shares on DC's Without Server Operators Membership

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Greetings, all!

My company has a need to allow some of the non-administrative IT staff to be
able to create shares on domain controllers. Without making these staff
members Server Operators, how can I allow them to perform this task? I'm
sure there is a few rights that I can assign, but I do not know what there
are.

Thanks for your time in advance,

- S

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi,
I'm not sure if you have to be able to log on locally to create a share,
if so then you are probably talking about the "Log on locally" policy which
is available either under "Local Security Policy" in control
panel>administrative tools or if you use Active Directory then it is
probably configured in a group policy on the Domain Controllers container of
the Users and Computers MMC. In the GPO link look under Computer
Configuration>Windows Settings>Security Settings>Local Policies>User Rights
Assignment.

Hope that helps!

--
Shaune


"Steven Bendis" <StevenBendis@discussions.microsoft.com> wrote in message
news:1943C25B-1FFB-407B-9C00-3D23E02994E9@microsoft.com...
> Greetings, all!
>
> My company has a need to allow some of the non-administrative IT staff to
be
> able to create shares on domain controllers. Without making these staff
> members Server Operators, how can I allow them to perform this task? I'm
> sure there is a few rights that I can assign, but I do not know what there
> are.
>
> Thanks for your time in advance,
>
> - S