Delegate domain amdin rights

[melfineo]

Is it possible to delegate domain admin rights to a user account for a specific OU including the ability to create and manage GPO's but grant no admin access to the rest of the domain?

Regards

 

[pagy]

http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html

http://www.microsoft.com/downloads/...a3-79e1-48fa-9730-dae7c0a1d6d3&displaylang=en

http://www.windowsecurity.com/articles/Built-in-Groups-Delegation.html

Paul
MCSE 2003
MCTS:Active Directory
MCTS:Network Infrastructure
MCTS:Applications Infrastructure

If there are no stupid questions, then what kind of questions do stupid people ask? Do they get smart just in time to ask questions?
Scott Adams

 

[ITPangaeaArchitect]

very easily yes....if those links above dont help, let us know

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+