Home        Tutorials        About        Services        Contact                        

 AD 06 - Testing AD delegation control with the first Jr. Admin and installing the RSAT tools.  Diagram

01   02   03   04   05   06   07   08   09   10   11   12   13   14   15   16   17   18   19   20
                      Official PayPal Seal

Any donations are welcomed and appreciated! (100% Safe)

   $1    $5    $10   $Other

Feel free to click on the "Donate" button to donate
whatever you feel you can.

Tutorial Overview
Remote Server Administration Tools for Windows 7 with SP1 enables IT administrators to manage roles and features that are installed on remote computers that are running Windows Server 2008 R2 with SP1 or Windows Server 2008 R2 (and, for some roles and features, Windows Server 2008 or Windows Server 2003) from a remote computer that is running Windows 7 or Windows 7 with SP1. It includes support for remote management of computers that are running either the Server Core or full installation options of Windows Server 2008 R2 with SP1, Windows Server 2008 R2, and for some roles and features, Windows Server 2008. Some roles and features on Windows Server 2003 can be managed remotely by using Remote Server Administration Tools for Windows 7 with SP1, although the Server Core installation option is not available with the Windows Server 2003 operating system.

The Power of OUs: An OU is a collection of AD objects, such as users, groups, computers, printers, and file shares, that you want to manage as one entity. All the objects in an OU must belong to the same domain. An OU is the smallest unit to which you can delegate administrative and maintenance tasks. (The larger structures that you can delegate to are sites and domains.) Server 2008 represents OUs as directory container objects, and each OU appears as a folder in the Active Directory Users and Computers utility. What Can You Delegate? As you consider your OU design, you will benefit from identifying the tasks you want to delegate. As you proceed with an AD implementation, you'll know how many OUs to create, the number and type of tasks you expect to delegate in each OU, and the number of administrative groups you need to support your distributed network management model.

Delegation of control is the ability to assign the responsibility of managing Active Directory objects to another user, group, or organization. By delegating control you can eliminate the need for multiple administrative accounts that have broad authority. Delegated administration in Active Directory helps ease the administrative burden of managing your network by distributing routine administrative tasks to multiple users. Basic delegated rights can be given to normal user like create a user account or group account etc and major domain-wide administration work can be delegated to senior/junior-level administrator.