Delegate OU In Adtive Directory in windows 2003 server.

Hello everybody,
I've just delegated an ou for an user in Adtive Directory in Windows 2003 server by right click the ou and then select the delegate control. It is ok. Now I want to cancel this task, I want to undelegate that OU for the user. How can I do? Please guide me step by step. Thanks.
diamondheadAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
KCTSConnect With a Mentor Commented:
There is noi simple wizard to undo a delegation, You need to go to "Active Directory Users and Computers" and make sure that  "View", "Advanced features" is selected

Right click on the OU that you delegated and click the security tab, you should see the account that you delegated to. Remove the account from the ACL to cancel the delegtion (or you can modify the permissions).
0
 
bsharathCommented:
Download Active administrator from Scriptlogic website.I think this is the only way to see the delegations and remove them...
0
 
l84workCommented:
KCTS is 100% correct!  

Sounds like you are not familiar with this process.  Be careful not to remove some of the default permissions, you don't want to lock out other users or even yourself.  And be careful with DENY permission, it overwrites everything else.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LauraEHunterMVPConnect With a Mentor Commented:
bsharath is entirely incorrect - third-party software is in no way a requirement to view and remove security delegations within AD. KCTS's instructions will point you in the correct direction.  If you have multiple delegations to undo (it sounds like you only have one but just in case) you can also use the dsrevoke command-line tool available here: http://www.microsoft.com/downloads/details.aspx?familyid=77744807-c403-4bda-b0e4-c2093b8d6383
0
 
bsharathCommented:
LauraEHunterMVP
I am sorry if i am wrong as i once was told that it was the only way by experts in EE. And when i wanted to find delegations i found the third party software very easy to find.
I tried dsrevoke but did not get the results...
The software is easy to click on each OU to find the delegated users....
0
 
l84workCommented:
Laura is correct, 3rd software is not a REQUIREMENT.

As for 3rd party software, I've used ScriptLogic before.  It does have a user friendly interface.  But personally, I think Hyenas 7.1 (http://www.systemtools.com/hyena/hyena_new.htm) is better.
0
 
diamondheadAuthor Commented:
Hello Everybody,
Thanks for your instruction. Now it's ok.  I have just done via the KCTS guides.  And I don't try with The third party software. Thanks again and Have a nice day.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.