Delegation of Control Wizard

[efector]

Once I use the delegation of control wizard, how do you 'roll back' the settings?

Example: I gave my helpdesk certain permissions, now I want to take them away. Other than deleting the group I granted the permissions to, how can I see what i gave them and how do I take the permissions back?

 

[IllogicallyLogical]

This KB article is in reference to Windows Server 2000, but my MS Press Server 2003 book states basically the same thing. You would need to go into every object and remove the specific group from the Security tab for the objects you delegated permission to. This is also where you would be able to view the current delegated permissions by clicking 'Advanced' on the Security tab.

- Delegate Control Wizard Cannot Be Used to Remove Groups or Users

http://support.microsoft.com/kb/229873

Though, I did find this tool that just might do what you are looking for. It states: "Dsrevoke complements the functionality provided by the Delegation of Control Wizard, which is used to delegate administrative authority, by providing the ability to revoke delegated administrative authority." Have a look into it.

- DSREVOKE.EXE

http://www.microsoft.com/downloads/...07-c403-4bda-b0e4-c2093b8d6383&displaylang=en

Scroll down to the bottom of this link for information on using "dsrevoke.exe".

- Appendix G: Active Directory Delegation Tools

http://technet2.microsoft.com/windo...41d9-4ded-9a74-665e9acb11a91033.mspx?mfr=true

Joey
CCNA, MCP, A+, Network+, Wireless#

 

[astaylor]

I had the same problem not to long ago. Try this post:

http://www.tek-tips.com/viewthread.cfm?qid=1387486&page=10

-drew