Delegate Control of Active Directory

[Guest]

Hello Microsoft Experts,

I grant the Read/Write user permission on one of the OU in the AD by using
Delegate Control Wizard. Can I create the user console onto the user
deskstop which is only see the OU that I had grant for the user? I don't
want him to see all the OU structure in the AD.

Many Thanks.

 

[Simon Geary]

No. The user will still see the full OU structure but will not be able to
perform any actions on it if your permissions are configured properly.

 

[Dmitry Korolyov [MVP]]

Yes you can. Open mmc.exe and add AD Users & Computers snap-in. Select the
OU you want and choose "New window from here" in the context menu. New
window will be created and maximized in the console, with the selected OU as
the root. Close the first window (console root), and finally save the
console in User Mode or User Mode - Full Access. THen distribute the .msc
file you saved to your users.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


Hello Microsoft Experts,

I grant the Read/Write user permission on one of the OU in the AD by using
Delegate Control Wizard. Can I create the user console onto the user
deskstop which is only see the OU that I had grant for the user? I don't
want him to see all the OU structure in the AD.

Many Thanks.

 

[Guest]

It is very useful. Thanks for your help.

One question another, If I want to add multiple OU to the user console, what
should I do? I can't highlight multiple OU to open the new window.

Also, I don't want him to do all sort of action, eg. Go to Add/Remove Snap
in on the File section, go to options etc.

Many Thanks.

 

[Dmitry Korolyov [MVP]]

You can add multiple windows to the console, targeted at different root OUs,
in the same way. Then just save the console file using "Limited Access,
Multiple window" or "Full access" (but not Author) mode in options.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


It is very useful. Thanks for your help.

One question another, If I want to add multiple OU to the user console,
what
should I do? I can't highlight multiple OU to open the new window.

Also, I don't want him to do all sort of action, eg. Go to Add/Remove Snap
in on the File section, go to options etc.

Many Thanks.