Solved

RE: Delegation of Administration

Posted on 2006-06-22
1
244 Views
Last Modified: 2010-04-18
I have a question regarding delegation of administration.  Your assistance is greatly appreciated.

If an administrator uses the Delegation of Administration Wizard and assigns certain administrative rights to a user account and/or group over a set of OUs in Active Directory, is there a way for me to view which group or user has been delegated rights and see what those rights are?  I have inherited an AD environment that needs to be cleaned up but I'm not sure if Microsoft has a native tool where I can see this and revoke any rights that a user or group should not have.  Is there a native tool or a third party tool (e.g. Quest Software ActiveRoles) that I can use to manage this?  

Thanks!!

TSB
0
Comment
Question by:tbaik
1 Comment
 
LVL 84

Accepted Solution

by:
oBdA earned 500 total points
ID: 16962699
The tool comes with AD: it's the Active Directory Users and Computers MMC. Just change to Advanced from the View menu, and you'll get a security tab in the properties of the AD objects. From there on, it's basically like NTFS.

Delegate Control Wizard Cannot Be Used to Remove Groups or Users
http://support.microsoft.com/?kbid=229873
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
change home folder path 4 56
RDP up only between 8am-13.00 pm ? 11 80
Trust relationship SBS2011 - > Windows 2003 3 44
SolarWind and DNS Server 12 87
So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question