Access rights on domain controller
<p> I have three support team members, and I want to restrict their permissions so they only have rights to join computers to the domain and install software. Currently, someone from the team is frequently changing permissions, leading to confusion and blame-shifting. I’d like to prevent this by properly delegating roles. We are using on-premises Active Directory with Windows Server 2022, and all users authenticate via the domain controllers. Could you please guide me on how to set up these specific permissions? I tried delegations but had no luck. </p>
