OU local DC admin rights

[easywx]

We are setting up a new 2003 domain which containes 34 seperate OUs with a DC at each location. These OUs are at different locations across the US. I know how to delegate control within the AD for each OU but I'm not sure how exactly to delegate rights for DC administration. I don't want to add each OU admin to the domain admin group of course. I know most administration tasks can be done remotely but we want the local OU admins to perform as domain admins almost like they would if they had their own domain but not be able to mess with the other OUs in the domain. Any suggestions or concepts I may be over looking?

Thanks

 

[tfg13]

Why don't you add them as local admins of the DC's at their location?

 

[easywx]

There is no local admin account on a domain controller.

 

[tfg13]

Your right. Had a bad day yesterday, and wasn't thinking clearly. The below article should help you out:

http://www.microsoft.com/technet/pr...ogies/directory/activedirectory/actdidcs.mspx