<div>
<div class="content wysiwyg-content">
I have a question regarding delegation of administration. &nbsp;Your assistance is greatly appreciated.<br />
<br />
If an administrator uses the Delegation of Administration Wizard and assigns certain administrative rights to a user account and/or group over a set of OUs in Active Directory, is there a way for me to view which group or user has been delegated rights and see what those rights are? &nbsp;I have inherited an AD environment that needs to be cleaned up but I'm not sure if Microsoft has a native tool where I can see this and revoke any rights that a user or group should not have. &nbsp;Is there a native tool or a third party tool (e.g. Quest Software ActiveRoles) that I can use to manage this? &nbsp;<br />
<br />
Thanks!!<br />
<br />
TSB
</div>
</div>


I have a question regarding delegation of administration.  Your assistance is greatly appreciated.

If an administrator uses the Delegation of Administration Wizard and assigns certain administrative rights to a user account and/or group over a set of OUs in Active Directory, is there a way for me to view which group or user has been delegated rights and see what those rights are?  I have inherited an AD environment that needs to be cleaned up but I'm not sure if Microsoft has a native tool where I can see this and revoke any rights that a user or group should not have.  Is there a native tool or a third party tool (e.g. Quest Software ActiveRoles) that I can use to manage this?  

Thanks!!

TSB

RE: Delegation of Administration

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).