Delegating control of an OU
In large Active Directory environments, administration may be challenging. Therefore, in environments with several teams of administrators and service desk personnel, delegation can be quite helpful. This way, just to name a few possibilities, service desk personnel may reset passwords, application administrators may change group memberships, and only true Active Directory admins may manage OUs.
Getting ready
To perform delegation of control, sign in with an account that is a member of the Domain Admins group or has full control privileges of the OU you want to delegate control over.
How to do it...
This recipe describes two ways to delegate control over an OU:
- Using Active Directory Users and Computers
- Using the command line
Using Active Directory Users and Computers
By far the easiest way to perform delegation of control is using the Delegation of Control Wizard from Active Directory Users and Computers (dsa.msc). Perform...
