Re: Delegate control questions
- From: "Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx>
- Date: Wed, 22 Nov 2006 13:02:29 -0000
Hi
1) Where and how can I see what rights I have delegated to him?Go yo the OU properties and select the Security tab (enable advanced view)
2) He cannot create computer or printer objects. What do I have to do to give him these rightsYou can rerun the delegation wizard again or do it manually in security tab.
3) If DomainAdmin create computers in the branch OU the local admin does not see them (maybe the answer to 2 is also the solution to 3)By default users have read access to all OUs if he doesn't see these newobjects means that replication didn't occur iet, you can force it if you want in ADSS or by command line.
4) I suppose I cannot remove read rights for other objects in the AD?You can deny read access, that's one of the reasons for OU creation, but rather then denying to a user you should do this to a security group, same applies to delegation of control.
--
*************************************************
I hope that the information above helps you
Good Luck
Jorge Silva
MCSA + Exchange + MSCE
*************************************************
"Tommy Forsman" <tofors99@xxxxxxxxxxx> wrote in message news:eG4NbuiDHHA.4024@xxxxxxxxxxxxxxxxxxxxxxx
Hi
Have created an OU for our branch office. Have delegated control to the local admin, so he can create users and groups, reset passwords, add computers to domain.
Some problems...
1) Where and how can I see what rights I have delegated to him?
2) He cannot create computer or printer objects. What do I have to do to give him these rights
3) If DomainAdmin create computers in the branch OU the local admin does not see them (maybe the answer to 2 is also the solution to 3)
4) I suppose I cannot remove read rights for other objects in the AD?
Tomppa
.
- References:
- Delegate control questions
- From: Tommy Forsman
- Delegate control questions
- Prev by Date: Reinstallation of FSMO DC
- Next by Date: Re: Reinstallation of FSMO DC
- Previous by thread: Re: Delegate control questions
- Next by thread: Re: WMI Filter usuage in Group policy
- Index(es):
Relevant Pages
|
