Hi We have just purchased AD manager licences for 10 users.

 

Will the helpdesk users have to be Domain admins to be able to perform password resets etc?.

Ideally we want to take away there domain admin rights and have them as domain users.

Will I have to give the Helpdesk group Delegation control on our AD structure?

Which would defeat the object as they could still access AD via MMC.

 

Thanks

Richard