AD Delegation

[2Sweet]

I only want to allow some key users to browse, unlock account, reset
password & disable account in Active Directory. No changes can be made on
the AD except those mentioned above. How to do it?

 

[Ace Fekay [MVP]]

In

I only want to allow some key users to browse, unlock account, reset
password & disable account in Active Directory. No changes can be
made on the AD except those mentioned above. How to do it?

You would use the AD Delegation Wizard:
http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html


--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

Infinite Diversities in Infinite Combinations

Having difficulty reading or finding responses to your post?
Try using Outlook Express or any other newsreader, configure a news
account, and point it to news.microsoft.com. Anonymous access. It's
easy and it's free:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

"Life isn't like a box of chocolates or a bowl of cherries or
peaches... Life is more like a jar of jalapenos. What you do today
may burn your butt tomorrow." - Garfield

 

[Jorge de Almeida Pinto [MVP - DS]]

also see:
http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx