Delegate of control for user objects

[AIXUser53]

can someone tell me how to delegate control to allow a desktop support person to move users objects between OUs without giving sweeping administrative rights?

Thanks in advance,

 

[Jpoandl]

(From another web site) One of the biggest advantages that Active Directory has over the flat Domain structure in NT 4 and earlier is that domain resources can be organized in a hierarchical tree design. This makes it easy to group users, computers, and other resources. Within AD, there is a wizard called the "Delegation of Control" Wizard. This tool will enable you to safely and easily delegate certain tasks to certain users within a specified Organizational Unit. To start the tool, simply right-click an OU in the Active Directory Users and Computers MMC window. Choose "Delegate Control..." and the wizard will start. From there just follow the prompts to choose which users you will delegate control to, and which actions you will be allowing them to perform.


Example of how to do this:

http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/delegsteps.asp

Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)