delegate DHCP authorization

[Rolf Rettinger]

How can I delegate the DHCP authorization? I can see that a subdomain admin
doesn't have permission on the Active Directory Site &
Services/Services/NetServices Container using the dHCPClass object type! How
can I create a delegation to allow those subdomain admins to authorize their
DHCP servers?

Thanks

ROlf


Object Open:

Object Server: DS

Object Type: dHCPClass

Object Name:
CN=NetServices,CN=Services,CN=Configuration,DC=intra-global,DC=net

New Handle ID: -

Operation ID: {0,12204989}

Process ID: 264

Primary User Name: YU01DC01$

Primary Domain: EE

Primary Logon ID: (0x0,0x3E7)

Client User Name: eeadmin

Client Domain: EE

Client Logon ID: (0x0,0xB979C3)

Accesses Create Child


Privileges -

Properties:

 

[Cary Shultz]

-----Original Message-----
How can I delegate the DHCP authorization? I can see that a subdomain admin
doesn't have permission on the Active Directory Site &
Services/Services/NetServices Container using the dHCPClass object type! How
can I create a delegation to allow those subdomain admins to authorize their
DHCP servers?

Thanks

ROlf


Object Open:

Object Server: DS

Object Type: dHCPClass

Object Name:
CN=NetServices,CN=Services,CN=Configuration,DC=intra- global,DC=net

New Handle ID: -

Operation ID: {0,12204989}

Process ID: 264

Primary User Name: YU01DC01$

Primary Domain: EE

Primary Logon ID: (0x0,0x3E7)

Client User Name: eeadmin

Client Domain: EE

Client Logon ID: (0x0,0xB979C3)

Accesses Create Child


Privileges -

Properties:



.

Rolf,

As I am sure that you know, you need to be a member of the
Enterprise Admins to authorize DHCP Servers. IIRC, you
could make the user account in question a member of the -
and this is where I do not remember exactly - DHCPxxx
group ( sorry, do not remember exactly ). Also, please
take a look at the following MSKB Articles:

http://support.microsoft.com/default.aspx?scid=kb;en-
us;246603

http://support.microsoft.com/default.aspx?scid=kb;en-
us;303351

http://support.microsoft.com/default.aspx?scid=kb;en-
us;255906

http://support.microsoft.com/default.aspx?scid=kb;en-
us;239004

HTH,

Cary

 

[btm]

You can delegate control as per

http://www.microsoft.com/windows2000/en/server/help/defaul
t.asp?
url=/windows2000/en/server/help/sag_DHCP_imp_AuthorizingSe
rvers.htm

Hope this helps

 

[Eric Chamberlain]

There is a potential problem in that it is all or nothing delegation. The
subdomain admins can add and remove each others DHCP servers.