What rights govern access to the AD snap-in?

Question

Active Directory

Good afternoon. I want to give technical support staff access to AD, located on a domain controller.

I gave the employees themselves rights in AD itself, but they cannot run the snap-in, since they require administrator rights, which they do not have on this server.

How is it possible to solve this issue? In order not to add the domain administrator role, but at the same time to have access to AD (for establishing users). It will not work to take the snap-in out of the domain controller, since other services are tied to it, which work only on the controller and are necessary for establishing users.

Answer 1

Who told you that "It will not work to take out snap-in for a domain controller"?
google rsat
no need to give permission to anyone to enter DC

Answer 2

Good afternoon. Look towards delegation of authority. Should solve your problem