DCPROMO Failed "This is not the last DC in the domain"

[Guest]

I have Windows 2003 w/ Active Directory running on a network of XP & 2000 workstations. Everybody is in the same domain, same part of the tree

How do I configure managers to manage their own departments, users and computers? They should not be able to administer anything from other departments. Only certain managers can manage all departments

Any help or documentation would be appreciated. I have tried to search microsoft's site and google, however am coming up with a blank

Thank you

 

[Matjaz Ladava [MVP]]

First setup your AD organizational units hierarchy based on your AD
administration. In your case put the objects that Managers would manage in
one OU or multiple OU's and then use Delegation of Control wizard to
delegate permission on that OU. You find this wizard if you rightclick on
OU.

--

Regards

Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
(e-mail address removed), (e-mail address removed)

 

[Chriss3]

Hi Bray as Matjaz says use the delegate of control wizard. This guide shows
how to delegate control of objects in an Active Directory service container,
using the Delegation of Control wizard in the Active Directory Users and
Computers snap-in.

Step-by-Step Guide to Using the Delegation of Control Wizard:
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/delegsteps.asp

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup

I have Windows 2003 w/ Active Directory running on a network of XP & 2000

workstations. Everybody is in the same domain, same part of the tree.

How do I configure managers to manage their own departments, users and

computers? They should not be able to administer anything from other
departments. Only certain managers can manage all departments.

Any help or documentation would be appreciated. I have tried to search

microsoft's site and google, however am coming up with a blank.