Dear All,
I want to create a HELPDESK group in AD which has the responsiablity to
manage and maintain the desktop such add pc to domain & manage they disk.
However, I don't want to give the domain admin right to this group.

Aries,

Under the "users" OU in active directory, create a new group called
"HELPDESK".  In this group, add the user accounts of the Helpdesk staff. 

On the "computers" OU, right click and go to properties, click the security
tab, click advanced.  Add the new group you just created and only give the
group "create computer objects" rights to the OU.

Show quoteHide quote

Mad Dog & Nero
Powersave and No CTRL ALT DELETE need monitor to turn off
trouble after DC restore
W2K STOP errors.
DOS prompt and "user cannot log in locally..."
Add workstation to domain??
Chinese Characters to display/print on 2000 Terminal Server
Windows Update doesn't scan my computer
Start Windows Task Manager by command-line (or batch file)
problem usb printer