Re: Delegation of Authority in an OU

From: Sarah K (skendall00_at_bellsouth.net)
Date: 07/09/04 

Date: 9 Jul 2004 05:55:23 -0700

I was meaning.. Can a user who is NOT on a domain, manage the
computers in a OU? If so, how can I do that?

--Thanks, Sarah

"Laura E. Hunter \(MVP\)" <hunter(nospamplease)@sfs.upenn.edu> wrote in message news:<uRevRnRZEHA.2500@TK2MSFTNGP09.phx.gbl>...
> How To: Delegate Administrative Authority in Windows 2000.
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;315676&sd=tech
>
> The steps outlined here will also work within Windows Server 2003. The
> really useful part about delegating authority is that the user receiving the
> delegated permissions does NOT need to be a member of the Domain Admins
> group or any similar administrative group.
>
> --
> ******************************
> Laura E. Hunter - MCSE, MCT, MVP
> Replies to newsgroup only
>
>
> "Sarah K" <skendall00@bellsouth.net> wrote in message
> news:82e7a957.0407081013.1177add4@posting.google.com...
> >I am running Windows Server 2003. I need to know if a non-domain
> > admin can have administrative rights to an OU? If this is possible,
> > how do you assign the rights to the non-domain admin?

Relevant Pages

  • Re: Remove Domain Admins ability from "Delegation Of Control"
    ... Domain Admins and administrators are very powerfull groups. ... There is no point of having a group that would only be able to delegate all ... Then i plan on removing the the Read Members, ... > modify the restricted group membership to this "restricted group ...
    (microsoft.public.win2000.active_directory)
  • Re: Delegate Authority
    ... Domain Admins is protected from delegatation with the adminsdholder functionality, you can move that group into any OU you want and the delegation in that OU will not allow someone to modify the group. ... I want to delegate certain roles to the HD folks by putting them in group named 'SupportAdmins' or something similar. ... I do NOT want the group inside the Organization OU as then have the ability to kick eachother out of the group or attempt to add the SupportAdmins groups to the Domain Admins group again correct? ...
    (microsoft.public.win2000.security)
  • Re: Delegation of Authority in an OU
    ... Delegate Administrative Authority in Windows 2000. ... The steps outlined here will also work within Windows Server 2003. ... > admin can have administrative rights to an OU? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Different Sites - One Database ?
    ... Create one site and delegate the necessary permissions to the different ... permissions to the child sites to the respective domain admins. ... MVP SMS ...
    (microsoft.public.sms.setup)
  • Re: delegation
    ... This is a hard way to do it, but the only way I found out to delegate ... access to event logs on Windows Server 2003. ... Yes use the Delegate of Control Wizard with in Active Directory Users and ...
    (microsoft.public.windows.server.active_directory)