Re: Different Sites - One Database ?


Your options would be:

Create one site and delegate the necessary permissions to the different
domain admins.

Create seperate sites that all report to one central parent site, give
permissions to the child sites to the respective domain admins.

To decide which one is best we need to know a bit more about the
physical design of your network, and what actions you would like to
delegate.

Kim Oppalfens
MVP SMS
In article <E9FE48D0-8D2C-4C24-9C13-46EE4BC15938@xxxxxxxxxxxxx>,
BookerW@xxxxxxxxxxxxxxxxxxxxxxxxx says...
> If you have one SMS server, and different Active Directory Domains, and you
> want to delegate administration of those domains to the respective domain
> admins, can you set up different sites, using one SQL database, and
> subsequently delegate the administration of those sites
>

--
Kim Oppalfens
SMS MVP
.

Relevant Pages

  • Re: Remove Domain Admins ability from "Delegation Of Control"
    ... Domain Admins and administrators are very powerfull groups. ... There is no point of having a group that would only be able to delegate all ... Then i plan on removing the the Read Members, ... > modify the restricted group membership to this "restricted group ...
    (microsoft.public.win2000.active_directory)
  • Re: Delegate Authority
    ... Domain Admins is protected from delegatation with the adminsdholder functionality, you can move that group into any OU you want and the delegation in that OU will not allow someone to modify the group. ... I want to delegate certain roles to the HD folks by putting them in group named 'SupportAdmins' or something similar. ... I do NOT want the group inside the Organization OU as then have the ability to kick eachother out of the group or attempt to add the SupportAdmins groups to the Domain Admins group again correct? ...
    (microsoft.public.win2000.security)
  • Re: Delegation of Authority in an OU
    ... Delegate Administrative Authority in Windows 2000. ... > The steps outlined here will also work within Windows Server 2003. ... > delegated permissions does NOT need to be a member of the Domain Admins ... > group or any similar administrative group. ...
    (microsoft.public.windows.server.active_directory)
  • replication monitoring rights
    ... We have recently gone through a strict security measure and removed ... pretty much everyone from domain admins and started to delegate every ... user account. ... not longer domain admins, BUT, have full delegation to their users? ...
    (microsoft.public.win2000.active_directory)
  • Re: User Permission - [WildPacket]
    ... This user shouldn't be a member of any of the built-in groups. ... create your own groups and delegate the necessary permissions to those ... Take a look at the best practices guide for delegating active directory ...
    (microsoft.public.windows.server.active_directory)