delegation of authority



We would like to use delegation of authority to allow the local
administrator full rights to the local branch office servers, users
and computers. Will the following work?
Create an OU at the domain level named for the brach office location.
Move the 4 servers at that site into the OU. Delegate Authority to
the 2 local administrators. I noticed the permissions to reset
passwords, manage group policy objets etc. We would also like to
grant permission to create and delete OUs on the 4 servers in this
branch office to these administrators and I did not see that listed as
an option. Is this possible? It is important that they can create
and maintain their own OUs.
We want them to have full contol and permissons on these 4 servers
only and be able to preform all administrative duties.
Where should we create the OU that these administrators will be added
into? Does it belong in the root of the domain or inside the new OU
that will contain the servers?

Thanks - Linda

.



Relevant Pages

  • Re: Admin accounts for Run As purposes only
    ... Administrators group of each server that needs to be managed. ... is this just as strong as a Domain Admin or is it more limited / ... > don't have enough servers to achieve a separation. ... >> I know we can delegate alot of tasks now such as user account ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegation dilemma
    ... That will spread the security control over a group of people ... your SMS and MOM servers are going to be member servers. ... SMSAdmins in the local administrators group of the SMS Primary and Secondary ...
    (microsoft.public.windows.server.active_directory)
  • Re: Loging on to virtual 2003 Terminal Server
    ... Administrators would not solve ... connected to the console session, connect as Admin2, click OK on ... MCSE, CCEA, Microsoft MVP - Terminal Server ... I have 4 blade servers, one is installed as a domain ...
    (microsoft.public.windows.terminal_services)
  • Restrict Desktop Administrators Issue
    ... I run a small Win2k native mode network with 28 servers, ... Since these guys are Domain Admins my policy restriction ... them out of the Domain Admins group or something else? ... My desktop guys need to be administrators on all the ...
    (microsoft.public.win2000.group_policy)
  • Restrict Desktop Administrators Issue
    ... I run a small Win2k native mode network with 28 servers, ... Since these guys are Domain Admins my policy restriction ... them out of the Domain Admins group or something else? ... My desktop guys need to be administrators on all the ...
    (microsoft.public.win2000.security)