Hi all gurus<o:p></o:p>
I'm new to AD, and my company just bought AD server and start to use AD.<o:p></o:p>
Now I need to define some role for below users and really need some expertise suggestion.<o:p></o:p>
CEO – What role should assign to CEO? What can the CEO do and what can’t the CEO do? When do IT need CEO help in this AD environment?<o:p></o:p>
Director – What role should assign for this group of people? What can they do and what they can’t do? Basically they just don’t want IT to control them and their laptop, also don’t allow anyone to remote into their laptop.<o:p></o:p>
Head of Department – What role should assign for this group of people? Basically our plan is let HOD to assign the folder access rights for their staff.<o:p></o:p>
IT Admin – What role should assign for this group of people? Our thought is only IT admin can access to all files and folder just as backup for the HOD and also help to assign access for Directors<o:p></o:p>
IT Users – What role should assign for this group of people? Our thought is IT users only allow to access to the folders belong to IT.<o:p></o:p>
I need to submit these rights/assignment to the board tomorrow for approval. So really need your help.<o:p></o:p>
Thanks<o:p></o:p>
wlho