IT Director

Steve B

<div>
That's exactly what I needed. &nbsp;Thanks a lot.
</div>


That's exactly what I needed.  Thanks a lot.

<div>
<div class="content wysiwyg-content fr-view">
Is there a way to give a user account operator privilege over just a single OU in Active Directory? &nbsp;I have an informatics specialist on staff that would like to be able to manage security group membership only in a specific OU so she doesn't have to bother our help desk for housekeeping issues like that. &nbsp;I am comfortable with that as long as I can limit what can be done, i.e. limiting the capability to edit group membership in a specific OU.&nbsp;
</div>
</div>



Is there a way to give a user account operator privilege over just a single OU in Active Directory?  I have an informatics specialist on staff that would like to be able to manage security group membership only in a specific OU so she doesn't have to bother our help desk for housekeeping issues like that.  I am comfortable with that as long as I can limit what can be done, i.e. limiting the capability to edit group membership in a specific OU. 

Can you limit account operators to one OU?

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.