OU Admins?

[Nathan Guidry]

Ok, I mades some OU groups, and now I would like to make a person in each of
the OUs an administrator of that OU only. Basically a person that could
unlock accounts, add workstations to their OU, basic administration. How do
I do this and make sure they cannot administer another OU or the domain?

 

[Paul Bergson]

Check this out. I think should get you what you need.

http://support.microsoft.com/default.aspx?scid=kb;en-us;315676

 

[C Hall]

Delegation of authority. Right-click on the OU > Delegate Control and follow
the prompts.

hth,
Chris

 

[Herb Martin]

Ok, I mades some OU groups, and now I would like to make a person in each of
the OUs an administrator of that OU only. Basically a person that could
unlock accounts, add workstations to their OU, basic administration. How do
I do this and make sure they cannot administer another OU or the domain?

Paul gave you a good link and what you wish
to do it fine, but do notice that you CAN give
anyone the delegated authority to manage ANY
OU -- even someone from another (trusted)
Domain.

They don't have to be in the same OU (or even
the same domain.)

That is a just a choice.

And for many common types of delegation you
can just "right click" on the OU and choose the
"Delegaton of Control..." wizard.

Or (in Advanced view) you can right-click->
Properties and use the Security (permissions)
tab to give out such control explicitly -- it looks
almost excactly like file permissions.
[/QUOTE]