Delegating Administrative Control Of The Active Directory Objects

By Author: iris
Total Articles: 286
Comment this article

To ensure that specific administrators receive the appropriate Network+ benefits permissions for an object, you must delegate the administration of the object. In this lesson, you learn how to use the Delegation Of Control Wizard to delegate administrative control of domains, OUs, and containers.
The Delegation Of Control Wizard steps you through the process of assigning permissions at the domain, OU, or container level. Permissions for other objects must be manually assigned as described in Lesson 2. Table 9-4 describes the function of each of the pages in the Delegation Of Control Wizard
Enables you to select the user accounts or groups to which you want to delegate control.
Enables you to select the tasks to delegate. You pick common tasks from a list or indicate that you want to create custom tasks to delegate.
Enables you to select the objects that you want to delegate, either
On the Permissions page, shown in Network+ exam, do one of the following:
Select General to display the general permissions ...
... (equivalent to the permissions displayed in the Security tab of the Properties dialog box for an object) in the Permissions box.
Select Property-Specific to display the permissions that apply to specific properties (equivalent to the permissions displayed in the Properties tab of the Permission Entry dialog box for an object) in the Permissions box.
Select Creation/Deletion Of Specific Child Objects to display the permissions that apply to the entire object (equivalent to the permissions displayed in the Object tab of the Permission Entry dialog box for an object) in the Permissions box.

You can verify permissions delegated for the container or objects in the container in the Security tab in the Properties dialog box for the container and in the Advanced Security Settings dialog box for the container. Refer to the previous lesson for specific instruction on accessing these dialog boxes.
Although the Delegation Of Control Wizard can be used to grant administrative permissions to containers and the objects within them, it cannot be used to remove those privileges. If you need to remove permissions, you must do so manually in the Security tab in the Properties dialog box for the container and in the Advanced Security Settings dialog box for the free Microsoft questions container. Refer to the previous lesson for specific instruction on accessing these dialog boxes.