Status: Solved
Priority: Medium
Security: Public
Views: 185
Last Modified: 2010-04-13

Delegate Control of Active Directory

I'd like to take control of Active Directory. If I set an OU with a delegate control, do I have to include my account with Full Control first. Or do I just go ahead and delegate control to my coworkers with rights to unlock account, change password, etc.?

In addition, how do you go about securing your Active Directory at work? I'm sure there are some irresponsible network people in your dept.! Speaking from current work nightmare!!!!

ch12345

Asked: 2002-07-17

Advertise Here

Windows 2000

1 Solution

LVL 17

mikecrCommented: 2002-07-18

Below is some informative information on delegation. I would suggest creating Task Pads that allow the user to only do what you have delegated in the Task Pad and won't give them complete access to AD like using the admin tools.

http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q235531

http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q315676

http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q294952

LVL 7

jmiller47Commented: 2002-07-18

I think mikecr has a good idea here. You should read up a bit on taskpads and create some for other people in the department and put them in user mode. Do this after delating control and setting up User rights and you should be fine.

ch12345Author Commented: 2002-07-18

I've read those pages you suggested. I will look further into Taskpad. Thanks.

LVL 17

mikecrCommented: 2002-07-19

I'm glad I could help. If you have any other questions, please let us know.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Expand your skills with this month's free Premium course.

Delegate Control of Active Directory

Join & Write a Comment Already a member? Login.

Featured Post