Deployment Solution

Hi,

There is a requirement arising in our environment to grant a ds security group to view and modify the computer properties.
Provided that we assign them the ' Modify - Object'  permission would be able to modify the computer props only or would be also able to modify other objects such as Ds jobs..for example?

Thanks, 

I'm pretty sure that when you grant/restrict permissions, you will need to do it both at the computer level (folders in the computer levels would be fine) and at the job level (again folders in the jobs area would be fine) as well.  So, if I am reading your question right, yes, you can restrict the user to only be able to modify computer objects and not have access to modify the jobs.

Bhawver,
Thank you for your swift reply. Yes, I see the point. However, the users that require this feature (viewing and modifying the Computer Properties in the ds win 32 console) are able to do that in the Ds Web console of the same server. However, the ds web console has a bad performance.
It sounds strange..however, when they are able to do the job on the ds web console they also should be able to do it on the ds win 32 console. We do not have two security models for the same DS.

Generally speaking, whatever rights you assign in the regular console should be effective for the web console.  The web console should get it's permission settings from the DS and SQL database.