Solved

Delegate Control of Active Directory

Posted on 2002-07-17
4
175 Views
Last Modified: 2010-04-13
I'd like to take control of Active Directory. If I set an OU with a delegate control, do I have to include my account with Full Control first. Or do I just go ahead and delegate control to my coworkers with rights to unlock account, change password, etc.?

In addition, how do you go about securing your Active Directory at work? I'm sure there are some irresponsible network people in your dept.! Speaking from current work nightmare!!!!
0
Comment
Question by:ch12345
  • 2
4 Comments
 
LVL 17

Accepted Solution

by:
mikecr earned 50 total points
ID: 7161899
Below is some informative information on delegation. I would suggest creating Task Pads that allow the user to only do what you have delegated in the Task Pad and won't give them complete access to AD like using the admin tools.

http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q235531

http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q315676

http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q294952
0
 
LVL 7

Expert Comment

by:jmiller47
ID: 7162397
I think mikecr has a good idea here. You should read up a bit on taskpads and create some for other people in the department and put them in user mode. Do this after delating control and setting up User rights and you should be fine.
0
 

Author Comment

by:ch12345
ID: 7163694
I've read those pages you suggested. I will look further into Taskpad. Thanks.
0
 
LVL 17

Expert Comment

by:mikecr
ID: 7164421
I'm glad I could help. If you have any other questions, please let us know.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Migrate Windows NT to Windows 2003 2 498
Old Schema existing from Windows 2000 DC that is no longer available 14 135
windows 2000 image 3 124
Running Baan iV on VMware 3 115
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In 2017, ransomware will become so virulent and widespread that if you aren’t a victim yourself, you will know someone who is.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now