Re: Delegating Control...

Jason:

Thanks for replying to my post.

I know how to do the Delegation of Control, but the descriptions of all the
permissions are not very good. Do you know any place that has good
descriptions of these?

Harrison Midkiff
"Jason Tan (MSFT)" <v-jasont@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:bIxy4cduFHA.3640@xxxxxxxxxxxxxxxxxxxxxxxx
> Hello harrison,
>
> Thanks you posting!
>
> I agree with kapil. You may follow his helpful suggestion. More
> information
> below is for your reference:
>
> 888204 How to use the Delegation of Control Wizard to grant permissions to
> a
> http://support.microsoft.com/?id=888204
>
> 315676 HOW TO: Delegate Administrative Authority in Windows 2000
> http://support.microsoft.com/default.aspx?scid=kb;en-us;315676
>
> 883381 Delegating administrator roles to an administrative group can grant
> the
> http://support.microsoft.com/?id=883381
>
> 304935 How to set Exchange Server 2000 and 2003 mailbox rights at the time
> of
> http://support.microsoft.com/?id=304935
>
> Hope the information helps. If there is anything that is unclear, please
> feel free to let me know.
>
> Thanks & Regards,
>
> Jason Tan
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> =====================================================
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
>
> --------------------
> | Thread-Topic: Delegating Control...
> | thread-index: AcW5uks0VtgKAxwDQMKh1bAO+sGjUQ==
> | X-WBNR-Posting-Host: 203.99.195.2
> | From: "=?Utf-8?B?a2FwaWw=?=" <kapil@xxxxxxxxxxxxxxxxxxxxxxxxx>
> | References: <ODLlinWuFHA.2064@xxxxxxxxxxxxxxxxxxxx>
> | Subject: RE: Delegating Control...
> | Date: Wed, 14 Sep 2005 22:57:02 -0700
> | Lines: 33
> | Message-ID: <EBD19F1E-4898-40BF-B668-F2380D2F4442@xxxxxxxxxxxxx>
> | MIME-Version: 1.0
> | Content-Type: text/plain;
> | charset="Utf-8"
> | Content-Transfer-Encoding: 7bit
> | X-Newsreader: Microsoft CDO for Windows 2000
> | Content-Class: urn:content-classes:message
> | Importance: normal
> | Priority: normal
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> | Newsgroups: microsoft.public.win2000.active_directory
> | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> | Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.win2000.active_directory:33520
> | X-Tomcat-NG: microsoft.public.win2000.active_directory
> |
> | Hello harrison,
> |
> | you can definatly find these options but for that you have to do a
> customize
> | delegation. that will give you all the options. Also be careful about
> the
> | adminSDHolder
> |
> | you can also go through article: KB 817433
> |
> | need help mail me.
> |
> | "Harrison Midkiff" wrote:
> |
> | > Hello:
> | >
> | > After a series of errors due to to many people having domain admin
> accounts
> | > I have finally decided to run the Delegation of Control wizard and
> restrict
> | > users access. I created a group and want to only allow them to do the
> | > following.
> | >
> | > 1. Join Computers to the domain
> | > 2. Move computers between OU's
> | > 3. Reset user passwords
> | > 4. Create Exchange Mailboxes
> | > 5. Add and remove groups to users.
> | >
> | > I tried to use the Delegation of Control wizard but it didn't seems to
> give
> | > me these options. Does anyone have experience running this who could
> help
> | > me out. Thanks.
> | >
> | > Harrison Midkiff
> | >
> | >
> | >
> |
>


.

Relevant Pages

  • Re: User Access Denied With DHCP Admin. Group?
    ... There are two main ways of delegating control in Active Directory - using ... permissions on the object or parent object. ... through the Delegation of Control Wizard or the Sites and Services advanced ...
    (microsoft.public.windows.server.active_directory)
  • RE: Problems reseting password using MMC
    ... delegation of control wizard. ... Then right-click on the container that you delegated control to and choose ... Now look at the permissions applied to the user/ group that you delegated ...
    (microsoft.public.windows.server.active_directory)
  • Re: join domain/create computer accounts... driving me NUTS!
    ... i added the following text to template6 and it doesnt even show up ... when i go to delegate control at the domain level!!!! ... "Account Restrictions" ... have you ever read the delegation of control white ...
    (microsoft.public.windows.server.active_directory)
  • Re: Remove Domain Admins ability from "Delegation Of Control"
    ... This delegation should only work if you have the security credentials to ... Another thing that would come along as you start to play with permissions ... > of Control wizard in the Active Directory Users and Computers Microsoft ... you must be a member of the Domain Admins ...
    (microsoft.public.win2000.active_directory)
  • Re: Delegation of rights
    ... > side the OU you have delegated the control to, ... Delegate only the required rights, in this case may not full ... May only to child objects within the OU and so on. ... >>> May the Step-by-Step Guide to Using the Delegation of Control Wizard can ...
    (microsoft.public.win2000.active_directory)