Delegating control to OUs

[ElmoChan]

We want to create an OU (about 250 workstations) and make someone the administrator of that OU with full complete administrative right but want to avoid granting them administrative right to the entire domain.

We also want to avoid branching off into seperate domains. (Company policies...I rather we did).

After creating the OU, the security group, granting "Full Control" in the security menu of the OU, allowing inheritance of permissions to flow downward. User still did not have complete administrative rights.

Any suggestions on how to go about this?

 

[GrnEyedLdy]

ElmoChan,

Did you run the Delegation of Authority wizard? Having a user in the ACL of the OU does not 'delegate' administrative authority to them.

Right-click the OU and choose ... Delegate Control... follow the wizard.


Patty