Solved

RE: Delegation of Administration

Posted on 2006-06-22
1
246 Views
Last Modified: 2010-04-18
I have a question regarding delegation of administration.  Your assistance is greatly appreciated.

If an administrator uses the Delegation of Administration Wizard and assigns certain administrative rights to a user account and/or group over a set of OUs in Active Directory, is there a way for me to view which group or user has been delegated rights and see what those rights are?  I have inherited an AD environment that needs to be cleaned up but I'm not sure if Microsoft has a native tool where I can see this and revoke any rights that a user or group should not have.  Is there a native tool or a third party tool (e.g. Quest Software ActiveRoles) that I can use to manage this?  

Thanks!!

TSB
0
Comment
Question by:tbaik
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 85

Accepted Solution

by:
oBdA earned 500 total points
ID: 16962699
The tool comes with AD: it's the Active Directory Users and Computers MMC. Just change to Advanced from the View menu, and you'll get a security tab in the properties of the AD objects. From there on, it's basically like NTFS.

Delegate Control Wizard Cannot Be Used to Remove Groups or Users
http://support.microsoft.com/?kbid=229873
0

Featured Post

Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question