how to delegate an ou to a local group and get the mmc to work

Good Day,

I would like to delegate full control permissions on a OU to a local group of users. More specifically I would like this group to have access to the mmc users and computers snap in from their XP desktop and make changes to the container and all other containers below it. This is what i do:

1-click runn and type mmc
2- choose Active Directory users and computers
3- Highlight the container and right click it and choose delegate
4- click on ad and choose the local group
5- click next and enable some tasks
6- click next and finish.
7- then i right click the ou and choose properties and then security and click add the local group and give the latter full control.
8-click ok
9-then i click show hide console tree/favourites
10-Then i click view
11- Customize
12-uncheck all the options and click ok
13-then i save the mmc on the desktop of the server.
14-I ask a user who is the member of the group in question to connect to the server and copy the mmc snapin i just created.
15-the user in question double click the icon and he gets a message stating that "Snapin failed to initialize" .

How can i get the snapin to work on users desktops?

Thanks,

Tacobell2000
Tacobell2000Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

luv2smileCommented:
You need to install the AD Users and Computers snap in to the user's computer...the mmc you created doesn't work because he doesn't have the AD U and C snap in.

You can install the snap in from the 2003 server admin pack off the cd to the XP workstation.

0
Tacobell2000Author Commented:
ok...went to the user's computer and installed the adminpak.msi. Then chose users and computers and the user gets the window that the snapin failed. The same message as before.
0
OnsiteComputerMedicsCommented:
This may be your problem.


IF YOU HAVE THE BETA 3 Version of Adminpak.msi installed, you MUST uninstall the beta 3 version before you install the RC1 version of adminpak.msi.  Build to build upgrades are not supported, if you have not uninstalled you will not get correct operation of some tools and you will not be supported.

Even after uninstalling the beta 3 version, the RAS User Extension snapin tool does not remove some registry entries on uninstall so you will see an error message when loading the AD Users and Computers tool until you manually remove them from the registry.  When the beta 3 version of adminpak has been uninstalled and the RC1 version installed you will still see the following error message:  

"Snapin failed to initialize.

 Name: RAS Dialin - User node Extension

 CLSID: B52C1E50-1DD2-11D1-BC43-00C0FC31FD3 " 


To correct this, you can manually remove the RAS User Extension registry keys, or cut and paste the following into a batch file (or .cmd file) called AP-fix.cmd and run the AP-fix file to automatically remove the registry keys.  This will prevent the AD Users and Computers snapin tool from trying to locate the RAS User Extension tool - the RAS Extenstion tool is no longer shipping the in the adminpak.msi file.  See KB artcile Q304718 for complete information.  



WARNING - MICROSOFT RECOMMENDS THAT YOU BACK UP YOUR REGISTRY BEFORE DOING ANY TYPE OF OPERATION THAT CHANGES THE REGISTRY  

 



-----------  copy the lines below up to the "end copy" message  --------------

@echo off

rem

rem  RAS user snapin extension - regkey cleanup, Beta 3 to RC1 upgrades only

rem

rem  use Reg.exe on Windows XP to delete the old key created by the Beta 3 RAS user extension snapin

rem

echo.

echo.  ready to remove the RAS User extension registry keys?

echo.

pause

@echo on

reg delete HKEY_CLASSES_ROOT\RasDialin.UserAdminExt    /f

reg delete HKEY_CLASSES_ROOT\RasDialin.UserAdminExt.1  /f

reg delete HKLM\SOFTWARE\Microsoft\MMC\NodeTypes\{19195a5b-6da0-11d0-afd3-00c04fd930c9}\Extensions\NameSpace /f

@echo off

echo.  

rem

rem  finished - the AD User and Computers snapin tool will no longer look for the RAS User extension tool

rem

--------------- end copy ----------------------






0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

Debsyl99Commented:
Just in case these are of any help:
7261 » When you open a security policy related MMC snap-in, you receive 'Snap-in failed to initialize'?
http://www.jsiinc.com/SUBO/tip7200/rh7261.htm
8498 » When you open a security policy related MMC snap-in, you receive 'Snap-in failed to initialize'?
http://www.jsiinc.com/SUBQ/tip8400/rh8498.htm
Error Message "Snap-in Failed to Initialize" When You Use Microsoft Management Console
http://support.microsoft.com/?id=297064

Deb :))

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Tacobell2000Author Commented:
Yiou are right on the money. Thank you very much!
0
Debsyl99Commented:
Glad to help :))
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Operating Systems

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.