RE: Delegation of Administration
Posted on 2006-06-22
I have a question regarding delegation of administration. Your assistance is greatly appreciated.
If an administrator uses the Delegation of Administration Wizard and assigns certain administrative rights to a user account and/or group over a set of OUs in Active Directory, is there a way for me to view which group or user has been delegated rights and see what those rights are? I have inherited an AD environment that needs to be cleaned up but I'm not sure if Microsoft has a native tool where I can see this and revoke any rights that a user or group should not have. Is there a native tool or a third party tool (e.g. Quest Software ActiveRoles) that I can use to manage this?