I work in an organization running Windows Server 2008 R2 domain controllers and Windows 7 clients. End users are administrators on their own workstations. Is there a way in Windows 7 to allow end users to modify domain-based security group membership for groups which they manage? In Windows XP users can go to the search GUI and modify domain-based security group membership there. I haven't found a similar location in Windows 7. If there isn't an equivalent location, can end users use the Remote Server Administration Tools while only allowing them access to security groups they manage (i.e., I don't want them creating GPOs or any other number of tasks the RSAT can accomplish)?

Hi, We recommend to use RSAT for an administrator in Windows 7 to managed roles and features that are installed on remote computers that are running Windows Server 2008 R2. You can download it on: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d It can managed AD, DHCP,DNS, GPO etc. by remote to Windows Server 2008 R2. You can turn on or turn off the RSAT Features in “Programs and Features”. If you just want Windows 7 end user to manage group in domain, you can turn on “Windows Features”---“Remote Server Administration Tools”---“Role Administration Tools”---“AD DS and AD LSD Tools”, select all the option above it, and click “OK” Hope that help. Regards, Leo Huang TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, Did your issue solved ? Please feel free to give me any update. Thanks. Regards, Leo Huang TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous steps should be helpful for many similar scenarios. If the issue still persists, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish. BTW, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts. Regards, Leo Huang TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Is there any way to accomplish this without having to install the RSAT? I ask because Windows XP allowed the same functionality with the search utility built into the OS.

Is there any way to accomplish this without having to install the RSAT? I ask because Windows XP allowed the same functionality with the search utility built into the OS.

Hi, Windows 7 are quite different with Windows XP, some components or functions has changed in Windows 7. In addition, you can try to use Windows XP Mode, it can be installed on Windows 7 Professional, Enterprise, or Ultimate editions. But I cannot ensure it works because I cannot get a try. Install and use Windows XP Mode in Windows 7 Also you can contact Windows Server Forum for further help, maybe they have another way to manage server from client. http://social.technet.microsoft.com/Forums/en-US/category/windowsserver Regards, Leo Huang TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Thanks Leo. I'll ping the Windows Server forum.