Access Rights

I have a new person in my IT department that I need to grant rights to do
certain things such as checking server event logs, Install windows updates,
and check the IIS logs on our web server. I would also like to give him the
abilty to unlock users in active directory without giving him complete
control to AD. I also don't want to make him an administartor. As of know
for the IIS logs I can he exclusive rights to this directory. How can enable
him to check event logs on all of our servers as well as everything else I
previous stated. Our domain structure is w2k but we have many windows 2003
member servers.

hi,
for unlock users make a delegation on OU for that user.
all users can check the eventlog on computers execpt for security event log
for wich have to be a member of administrators group.
how to install updates from microsoft update site, wsus?
--
Dragos CAMARA
MCSA Windows 2003 server


"George Schneider" wrote:

> I have a new person in my IT department that I need to grant rights to do
> certain things such as checking server event logs, Install windows updates,
> and check the IIS logs on our web server. I would also like to give him the
> abilty to unlock users in active directory without giving him complete
> control to AD. I also don't want to make him an administartor. As of know
> for the IIS logs I can he exclusive rights to this directory. How can enable
> him to check event logs on all of our servers as well as everything else I
> previous stated. Our domain structure is w2k but we have many windows 2003
> member servers.

we install update smanually from microsoft update

"Dragos CAMARA" wrote:

> hi,
> for unlock users make a delegation on OU for that user.
> all users can check the eventlog on computers execpt for security event log
> for wich have to be a member of administrators group.
> how to install updates from microsoft update site, wsus?
> --
> Dragos CAMARA
> MCSA Windows 2003 server
>
>
> "George Schneider" wrote:
>
> > I have a new person in my IT department that I need to grant rights to do
> > certain things such as checking server event logs, Install windows updates,
> > and check the IIS logs on our web server. I would also like to give him the
> > abilty to unlock users in active directory without giving him complete
> > control to AD. I also don't want to make him an administartor. As of know
> > for the IIS logs I can he exclusive rights to this directory. How can enable
> > him to check event logs on all of our servers as well as everything else I
> > previous stated. Our domain structure is w2k but we have many windows 2003
> > member servers.