I would like to delegate full control permissions on a OU to a local group of users. More specifically I would like this group to have access to the mmc users and computers snap in from their XP desktop and make changes to the container and all other containers below it. This is what i do:
1-click runn and type mmc
2- choose Active Directory users and computers
3- Highlight the container and right click it and choose delegate
4- click on ad and choose the local group
5- click next and enable some tasks
6- click next and finish.
7- then i right click the ou and choose properties and then security and click add the local group and give the latter full control.
9-then i click show hide console tree/favourites
10-Then i click view
12-uncheck all the options and click ok
13-then i save the mmc on the desktop of the server.
14-I ask a user who is the member of the group in question to connect to the server and copy the mmc snapin i just created.
15-the user in question double click the icon and he gets a message stating that "Snapin failed to initialize" .
How can i get the snapin to work on users desktops?