Delegating Control

steveh2001 · #1 07-Jul-2007, 10:01 AM

Hi guys

Hope this is the right section - ive been mucking around with server 2008 to try and replicate the setup we have at work. From what I understand its typical for the enterprise/sever admins (not me!) to have domain admin rights - and in order to let the lower helpdesk people administer create accounts/groups etc (me!) they use the delegate control function in AD to do this? (Please correct me if im wrong!)

Now i setup a few OU's to muck around with and wanted to delegate control to a normal user and it worked nicely - however im not sure where in AD to see my deligation and amend it if necessary?

I assume 2008 is similar to 2003 AD wise (although i hate the changes in the explorer views

)

Thanks for any help!

nicolinux · #2 07-Jul-2007, 10:13 AM

If is like win2k3 you can switch the view in advanced mode.
You should be able to see the OU's security tab .

**Sparky** · #3 07-Jul-2007, 10:18 AM

In 2003 if you right click on an OU > Properties > Security Tab > Advanced and then click on permissions then the delegated users will be there.

To view the whole AD you have to run a script to automate the process.

http://www.microsoft.com/technet/scr....mspx?mfr=true

steveh2001 · #4 07-Jul-2007, 10:25 AM

Perfect - thanks guys! Should have known that really as we use the security tab on resource mailbox's etc

Cheers