shahrun

Hi all,

As part of compliance, we need to segregate a win2k3 IDs into 2 group with the following roles:

Security Group
-Able to create/delete win2k3 user id
-The rest of the privileges is same as "User" group privilege

Server Support Group
- Can not create/delete win2k3 user id
- The rest of the privileges is same as "Administrator" group privileges.

Maybe some one can help me to find how this can be implemented wheter to set on the Local Security Policy or in the registery.