Active Directory delegation

[said07]

We upgraded to Windows Server 2008 r2 and I would like to delegate to an intern some tasks in Active Directory like creating/deleting computer accounts, creating/deleting/resetting users accounts.
Is there a good document that shows how to go through the delegation setup? we did it in 2003 and it wasn't the easiest task.
Thanks,

Said

 

[said07]

I just remembered that we also created an mmc on the user's pc to access the Active Directory instead of logging onto the server.
That would be the scenario I am looking to implement.
Thanks for the input.

 

[DrB0b]

http://www.trainsignaltraining.com/windows-server-2008-active-directory-users

This is a link for a pictured walk-through of creating a user and a user template for if your creating numerous out of the same type. Once you know how to create the account, modifying and deleting are simple and straightforward.



"Silence is golden, duct tape is silver...

 

[said07]

DrBob, I am looking for creating delegation and an mmc to allow an intern to help managing some of the active directory. Thanks

 

[DrB0b]

Sorry its been a long and stressful day after a power outage.....

http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html

This might help a bit also

http://www.youtube.com/watch?v=I7ighWF8Hd0

"Silence is golden, duct tape is silver...

 

[said07]

Sorry to hear about that. I will check the links out. Thanks again

 

[kmcferrin]

If you already did it in 2003 then the permissions should still be present after going to 2008 R2. All you would need is to install the Remote Server Admin Tools (RSAT) on his PC, or just the ADUC component. If all he's doing is modifying accounts he can probably continue to use the existing MMC on his PC. Though he wouldn't be able to see any of the new properties/pages that come with the new version of ADUC, it sounds like he probably wouldn't need them if he's only doing basic account management.

________________________________________
CompTIA A+, Network+, Server+, Security+
MCTS:Windows 7
MCSE:Security 2003
MCITP:Server Administrator
MCITP:Enterprise Administrator
MCITP:Virtualization Administrator 2008 R2
Certified Quest vWorkspace Administrator

 

[said07]

kmcferrin, when I said "I just remembered that we also created an mmc on the user's pc to access the Active Directory" I wasn't very clear. we had done this for a user in my eng group, not for this intern. And the eng user has long left the comapny.
The links provided by DrBob above show clearly how to go about the delegation. I am still trying to find out how we did the mmc. It was neat because all the eng user could see was the OU we delegated. I have not had a chance to play yet with Remote Server Admin Tools. Thanks.