How to Allow Non-Root or Enterprise Administrators to Authorize RIS Servers in Active Directory

ID: Q239004


The information in this article applies to:
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
  • Microsoft Windows 2000 Server


SUMMARY

For Remote Installation Service (RIS) servers to begin to service clients, they must first be authorized by Dynamic Host Configuration Protocol (DHCP) by using the DHCP Management snap-in. However, only administrators of the root domain or members of the Enterprise Administrators group have the necessary permissions to do this.


MORE INFORMATION

If your organization requires that other users have these permissions or you want to delegate this task:

  1. As an administrator of the root domain, start the Active Directory Sites and Services snap-in. On the View menu, click Show Services Node.


  2. Click Services, and then click NetServices.


  3. Right-click NetServices, click Properties, and then click the Security tab.


  4. In the Security dialog box, assign the following permissions to the users or groups for which you want to authorize these servers: Read, Write, and "Create all Child objects."


  5. Click Advanced. In the Access control Settings for NetServices dialog box, click the user or group you just added, and then click Edit on the View menu.


  6. In the Apply onto box, click This object and All Child Objects.


The user or group can then authorize the RIS servers. If you still receive an "Access denied" error message, force replication between the servers, or wait until the scheduled replication occurs.

Additional query words:

Keywords : kbenv
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbhowto


Last Reviewed: December 29, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.