Pau Lo

IT Professional

Albert Widjaja

<div>
At the same spot you can modify/add permissions as well.
</div>


<div>
there's a wizard in AD for that but most people do it manually.<br />
I recommend creating groups to make the management and auditing easier, but it's very similar to assigning permissions to NTFS folders really. Select a user (or group) and assign what rights thay have to any given user, group.<br />
<br />
Use of OUs often makes delegation easier. take a look at the below guide:<br />
<br />
<a href="https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/delegating-administration-by-using-ou-objects" rel="ugc">https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/delegating-administration-by-using-ou-objects</a>
</div>


<div>
You can find a <b>Delegwiz.inf</b> that extend the standard delegation wizard in my article <b>Delegation the proper way</b><br />
Utilize the principle of role and delegation groups<br />
<a href="https://www.experts-exchange.com/articles/29366/Delegation-the-proper-way.html" rel="ugc">https://www.experts-exchange.com/articles/29366/Delegation-the-proper-way.html</a>
</div>


<div>
<div class="content wysiwyg-content">
is it possible in AD to delegate to groups other than say domain admins who can manage a security groups membership, or more importantly, are there any commands e.g. powershell cmdlets to check who has been given that level of access where they can add members to a group, remove members from a group etc.
</div>
</div>


is it possible in AD to delegate to groups other than say domain admins who can manage a security groups membership, or more importantly, are there any commands e.g. powershell cmdlets to check who has been given that level of access where they can add members to a group, remove members from a group etc.

AD group management delegation.

Windows PowerShell is a task automation and configuration management framework from Microsoft, consisting of a command-line shell and associated scripting language built on the .NET Framework. PowerShell provides full access to the Component Object Model (COM) and Windows Management Instrumentation (WMI), enabling administrators to perform administrative tasks on both local and remote Windows systems as well as WS-Management and Common Information Model (CIM) enabling management of remote Linux systems and network devices.

Powershell

Windows Server 2012 is the server version of Windows 8 and the successor to Windows Server 2008 R2. Windows Server 2012 is the first version of Windows Server to have no support for Itanium-based computers since Windows NT 4.0. Windows Server 2012, now in its second release (Windows Server 2012 Release 2) includes Foundation, Essentials, Standard and Datacenter, and does not support IA-32 or IA-64 processors.

Windows Server 2012

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.