Re: delegating administrative access

From: ptwilliams (ptw2001_at_hotmail.com.donotspam)
Date: 02/28/05 

Date: Mon, 28 Feb 2005 06:49:04 -0800

That's it. Although he'll also need read, but should have that by default.

What isn't working if you've done this? What error are you getting?

Start by checking that the DHCP Client Service is rset to automatically start
and is running on the DC; that the DNS zone accepts dynamic updates; and that
the DC is pointing to itself for DNS.

Once you've done this, restart netlogon.

After restarting netlogon, run netdiag /test:dns.

Run the tests again.

The missing SPNs is worrying; however, we have to make sure DNS is working
correctly before we can further troubleshoot anything else... 

--
Paul Williams
http://www.msresource.net/
http://forums.msresource.net/
"richierich" wrote:
> funny, I did that and it did not work.  I thought that would be it too. 
> mmmmm.   anything else to look at?
> 
> 
> "ptwilliams" <ptw2001@hotmail.com.donotspam> wrote in message 
> news:0B7B022D-B104-44EC-A40B-8552CFE55971@microsoft.com...
> > Load ADU&C (dsa.msc) and select Advanced Features from the View drop-down 
> > menu.
> >
> > Then right-click the container or OU that you wish to configure the
> > delegation on and choose properties.  In the properties tab, choose 
> > Security
> > and then Advanced.  In the Access Control Settings for <OU Name> choose 
> > add,
> > add the user name, and then in the Permission Entry for <OU Name> select 
> > the
> > following Allow permissions:
> >
> > Create Computer Objects
> > Delete Computer Objects
> >
> >
> > Hope this helps,
> >
> > --
> >
> > Paul Williams
> >
> > http://www.msresource.net/
> > http://forums.msresource.net/
> >
> > "richierich" wrote:
> >
> >> I want to delegate admin tasks to a jr admin.  I want him specifically to 
> >> be
> >> able to rename computer objects in my domsin.  what settings do I need to
> >> check to allow this?  I did the delegation wizard, but it is not that
> >> granular in its use.
> >>
> >> -thanks
> >>
> >>
> >> 
> 
> 
>

Relevant Pages

  • Re: delegating administrative access
    ... > delegation on and choose properties. ... In the properties tab, choose ... > Create Computer Objects ... >> I want to delegate admin tasks to a jr admin. ...
    (microsoft.public.win2000.active_directory)
  • RE: delegating administrative access
    ... Load ADU&C and select Advanced Features from the View drop-down menu. ... delegation on and choose properties. ... Create Computer Objects ... > I want to delegate admin tasks to a jr admin. ...
    (microsoft.public.win2000.active_directory)
  • Re: Remove Delegation / Transfer Records
    ... NS record for the DNS you are removing the zone from. ... And wouldn't the delegation NS point to ... childdomain4 ...
    (microsoft.public.windows.server.dns)
  • Re: Error on Forwarders in my dcdiag results
    ... I wouldn't take the step of having the ISP remove the delegation. ... The purpose of the trailing dot is to make a DNS name fully qualified. ... nslookup queries, nslookup will start by appending suffixes to find the name ...
    (microsoft.public.windows.server.dns)
  • Re: how-to on DNS delegation?
    ... Our main forest, company.local, hosts the DNS for the entire forest ... make a delegation of "one.company.local", I will get a message saying ... conditional forwarding be the best way to solve this? ...
    (microsoft.public.windows.server.dns)
Quantcast