Re: Assigning members to Security Global Groups

"Pearl" <Pearl@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:AF19C4AA-ABD1-4306-AC0E-EF86B78250C9@xxxxxxxxxxxxxxxx
How can I delegate membership assignments to Global Security Groups? I don't
want to use the Manager feature. I hear there is another way thru special
permissions or special rights.


It's done through Active Directory delegation. On the OU that the groups and users exist, you can delegate these permissions to a junior admin to do a variety of tasks, without them having additional permissions elsewhere in the domain. Read the following for an overview and greater understanding.

Best Practices for Delegating Active Directory Administration ...Dec 5, 2005 .... Administrative responsibilities for delegating Active Directory management are divided between: Service owners, who are responsible for: ...
http://technet.microsoft.com/en-us/library/cc773318(WS.10).aspx

Windows Server 2003Microsoft Windows Server 2003: Library, learning resources, downloads, support, and community. Evaluate and find out how to install, deploy, and maintain on ...
Downloads - Troubleshooting - Technical Certifications and ...
http://technet.microsoft.com/en-us/windowsserver/bb512919.aspx

More results from technet.microsoft.com »
How do I Delegate Administrator Privileges in Active Directory?Delegated administration in Active Directory helps ease the administrative burden of .... All or part of service management (called service autonomy). ...
www.tech-faq.com/delegate-administrator-active-directory.shtml

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum to benefit from collaboration among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.

.

Relevant Pages

  • Re: Cant assign calendar permissions to a group
    ... to be able to use a security group so that I can manage membership of ... By testing I have verified that a resource calendar's permissions can ... integral concept within Active Directory. ... Only individual users can be granted membership. ...
    (microsoft.public.exchange.admin)
  • Re: Security User access question
    ... >> I am not even sure if Active Directory can provide this ... >it could be done with vbscript. ... >permissions, what permissions they have and, in the case ... >enumerate the group membership to find out the users. ...
    (microsoft.public.security)
  • Re: Security User access question
    ... > I am not even sure if Active Directory can provide this ... permissions, what permissions they have and, in the case of a group, ... enumerate the group membership to find out the users. ... The other option would be to combine vbscript with perms.exe (from the ...
    (microsoft.public.security)
  • Re: Enable Email to a Document Library in Sharepoint 3.0
    ... When email enabling a document library, you have to ensure that the application pool account has permissions in Active Directory to create an email enabled contact. ... You must configure SMTP on the Farm level before you can configure it on the Web Application and ultimately email enable a document library. ... In the Server Docs document library settings I've enabled incoming ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Limited AD management tool - User values for Exchange (name, title, phone, etc) ONLY
    ... I recommend to give the user or the group who will put this information in ... wanted fields for low-level administration such help-desk etc. ... > in our organization) to edit information in Active Directory such as Last ... > would normally put in an organizational directory (or one would normally ...
    (microsoft.public.windows.server.active_directory)
Loading