Re: Limited Access to ADU&C for HR?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Chriss3 [MVP] (noSpamHere_at_chrisse.se)
Date: 12/01/04 

Date: Wed, 1 Dec 2004 19:56:03 +0100

Hello Rube,
Take use of the Delegate of Control Wizard.

See the Step-by-Step Guide to Using the Delegation of Control Wizard
This guide shows how to delegate control of objects in an Active Directory
service container, using the Delegation of Control wizard in the Active
Directory Users and Computers snap-in.

http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/delegsteps.asp 

-- 
Regards
Christoffer Andersson
Microsoft MVP - Directory Services
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"Rube" <dont@spam.me> skrev i meddelandet 
news:%23DFlcQ91EHA.2012@TK2MSFTNGP15.phx.gbl...
> Hi All,
>
> I would like to offload everyday management of security group & user
> maintenance to a member of our HR team who was a network admin in a 
> previous
> life. This person would be allowed to use Active Directory Users & 
> Computers
> to add new users & change group memberships in the domain, as well as 
> change
> file & folder security in the HR file server. I would prefer not to make
> them a domain admin obviously. . .
>
> Any recommendations or caveats? Anyone else do this? What permissions do I
> have to give this HR person to allow them to accomplish the above tasks?
>
> TIA,
> Rube
>
>

Relevant Pages

  • Re: DCPROMO Failed "This is not the last DC in the domain"
    ... Hi Bray as Matjaz says use the delegate of control wizard. ... how to delegate control of objects in an Active Directory service container, ... Step-by-Step Guide to Using the Delegation of Control Wizard: ...
    (microsoft.public.win2000.active_directory)
  • RE: Delegate Exchange Permission
    ... OU's in Active Directory. ... of Control Wizard" to give specific users/groups sepcific permissions on all ... I want to delegate our helpdesk staff the following tasks: ... 3- add a user account to certain group ...
    (microsoft.public.exchange.admin)
  • Re: Active Directory Delegate Tab
    ... to see and create trusts you go to Active Directory Domains and Trusts. ... To perform AD delegation of control, open Active Directory Users and Computers and for example right click on domain and choose "delegate control" option, you can also use the Security tab to delegate rights if you want. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Best way for users to edit their AD entries?
    ... You can use the Delegate Of Control Wizard at the Domain node and Delegate ... Control for the DYNAMICAL Account SELF, As you have found out SELF are by ... Directory doesn't appears in My Network Places by default since Windows XP, ...
    (microsoft.public.windows.server.active_directory)
  • Re: delegate control over workstations by OU
    ... the active directory it's not related to the access of the particular ... > I am trying to delegate complete control over workstations located in an> OU ...
    (microsoft.public.win2000.active_directory)