allow manager to manage own employees

[Guest]

I have Windows 2003 w/ Active Directory running on a network of XP & 2000 workstations. Everybody is in the same domain, same part of the tree

How do I configure managers to manage their own departments, users and computers? They should not be able to administer anything from other departments. Only certain managers can manage all departments

Any help or documentation would be appreciated. I have tried to search microsoft's site and google, however am coming up with a blank

Thank you.

 

[Ron Oglesby [MVP]]

Best bet would be to create an OU for the department to be managed. Then
delegate the OU and its contents to the manager's account (or a group
containing that account).

Anyway in addition to this you could make that group a member of the local
admins group on the PCs in that dept. if you want them to also be able to
change local workstation stuff.


Ron Oglesby
Terminal Services MVP

I have Windows 2003 w/ Active Directory running on a network of XP & 2000

workstations. Everybody is in the same domain, same part of the tree.

How do I configure managers to manage their own departments, users and

computers? They should not be able to administer anything from other
departments. Only certain managers can manage all departments.

Any help or documentation would be appreciated. I have tried to search

microsoft's site and google, however am coming up with a blank.

 

[Chriss3]

What Ron comes up with here is also the best way so far I know. The link
below describe how to Delegate Control Step-by-Step.

Step-by-Step Guide to Using the Delegation of Control Wizard
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/delegsteps.asp

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup