Useful when an administrator to handover partial administration of the domain to an assistant administrator delegate control can be assigned to sub admins on OUs or on domains.
Assigning Delegate control for sub administrator.
On DCOpen ADUCselect domain controller (right click)
New user
Right click on OU
Delegate control
Next – add the user we’ve created.
Next>select as our wish
Next – finish
Verification:
Move on to member server
Login as sub administrator
Start – run – dsa.msc
Try to create users in delegated OU
Taking back delegation of control from a User:
On DC
Open ADUC
Click on view
Advanced features
Select the OU which we want to take back control
Right click > properties
Security
Select the sub admin user
Remove – apply – ok
No comments:
Post a Comment