Home        Tutorials        About        Services        Contact                        

 AD 04 - Creating new computers, groups and users objects in the domain to deploy OU delegations.  Diagram

01   02   03   04   05   06   07   08   09   10   11   12   13   14   15   16   17   18   19   20
                      Official PayPal Seal

Any donations are welcomed and appreciated! (100% Safe)

   $1    $5    $10   $Other



Feel free to click on the "Donate" button to donate
whatever you feel you can.

Tutorial Overview
Managing a distributed Active Directory environment requires dividing administrative responsibility among trusted data and service administrators and implementing administrative roles and access control to support secure and efficient delegation of administration. Active Directory management involves many different operations that require administrative privileges granted by default to AD administrators only. Though operations like password reset or account unlock are pretty simple, they take a lot of time of highly-skilled IT staff, not allowing them to focus on more complex and important issues. Active Directory delegation helps you optimize the productivity of the IT department by letting non-administrative users

When you sit down to implement delegation of administration, you first need to decide on which actions you want to delegate out. Microsoft continues to add specific tasks for you to easily setup. These tasks are common tasks that most companies need to delegate out, regardless of the size of the organization. The benefit of having this prebuilt list of tasks is that you can mask the actual permissions that need to be set on the OUs.

When you look at how you want to administer objects within your Active Directory design, you will want to look at delegation of administration. This powerful feature allows you to offload administration of common tasks that should really be done by the owners of the content, such as resetting passwords and modifying group membership. By using the Delegation Control wizard, you can take advantage of some of the most common tasks provided to you by Microsoft. If you want to customize your delegation of administration list, you will need to use the customization option shown in Figure 4. Regardless of the options you choose, you need to use delegation of administration in Active Directory to get the biggest bang for your buck on your Active Directory investment.