Solved

Delegating permissions on OU

Posted on 2014-12-01
5
14 Views
Last Modified: 2016-04-15
Hi,

I have assigned reset permissions to a group using the delegate wizard and created a custom tool using the mmc snap in for the users to reset passwords on the OU to which they have permissions.  The AD is at 2003 level and I know the tool works as I can access the OU using the tool as a domain admin.

However, when people in that group try to access the OU which I have delegated control to using the same tool, they cannot access it?
0
Comment
Question by:Nick_D
  • 2
  • 2
5 Comments
 
LVL 5

Expert Comment

by:A Karelin
ID: 40475244
What do you meen "cannot access"?
Do they have read permission for the OU?
0
 
LVL 10

Expert Comment

by:Walter Padrón
ID: 40476706
0
 
LVL 1

Author Comment

by:Nick_D
ID: 40486961
Hi Walter

This is exactly what I have done.  Created a reset password tool from a new taskpad view and delegated control of the OU to a new security group which this person is a member of.  However, when they try to open the tool they get an error that the MMC cannot build the snap-in.  When I try it using my credentials it works fine so it must be a permission error.
0
 
LVL 10

Accepted Solution

by:
Walter Padrón earned 500 total points
ID: 40487236
It could be a problem with the MMC itself or the .Net framework.

Try to run MMC with "Run as administrator" option and also check the Application event log for errors.
0
 
LVL 1

Author Comment

by:Nick_D
ID: 40564339
Sorry for the delay getting back to you, been out of the country.  Running as administrator still present the same issue?
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Synchronize a new Active Directory domain with an existing Office 365 tenant
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now