built-in abilities

From: Onno Pieters (nobloz@xs4all.nl)
Date: 05/09/02 

From: "Onno Pieters" <nobloz@xs4all.nl>
Date: Thu, 9 May 2002 09:33:06 -0700

Hi all,

There is a group of users who need to do some tasks.

I want to make a (global or Local) group and give that
group Advanced user rights and abilities to do the
folowing tasks.

- logon localy
- Shut down the system
- Backup files and directories
- Retore files and directories
- Create and manage global groups
- Create and manage local groups
- lock the server
- Share and stop sharing directories
- Share and stop sharing printers

The only way I can get this to work is that the group must
be a member of Server Operators AND Account Operators.

But then they can do more then we want, like:
- Change the system time
- Force shutdowm from a remote system
- Add workstations to domain
- Create and manage user accounts

Is there a way to make a group and give it only the rights
they need.

Pease help

Onno Pieters