Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

I want to delegate the creation of sub-OU for an OU in my AD . What is the name of this Active Directory permission ?

Posted on 2014-03-20
2
Medium Priority
?
910 Views
Last Modified: 2014-03-20
Hello everyone,

I guess the title of my question tells you everything.  Basically I want, for a specific OU only, to delegate the creation of a new sub-OU  to a certain user  .  

What is the name of the permission I need to modify  ?  There are sooooooo  many and I am not sure which one is !   BTW , I have Windows 2003 AD

Thanks you all !

Cheers
0
Comment
Question by:Bibecu
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 38

Accepted Solution

by:
Mahesh earned 2000 total points
ID: 39943383
Right click required OU and select delegate control
Select user \ group to whom you wanted to delegate permissions
Then select custom task
In custom task, select "only the following object in the folder" and select Organization unit from list and from bottom select create selected objects and delete selected objects
Then select full control permissions on next page

Same way you can add more permissions if wanted to

Mahesh
0
 

Author Closing Comment

by:Bibecu
ID: 39943396
Excellent, thank you Mahesh !

Cheers
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question