Delegate Control

  • Thread starter Thread starter Sarah Clements
  • Start date Start date
S

Sarah Clements

I have a question about Delegating Control v.s the Managed By tab. Can
anyone explain the difference. I get the feeling that Managed By does
nothing in terms of allowing a user to take control over a specific group or
OU and take care of administration.

Also, after I use the "Delegation of Control Wizard" and assign a user as
the delegator, I cannot go back in and see where it has gone into affect.

Thank you in advance.
 
Managed By Tab is used to view/change managedBy attribute. It has nothing to
do with AD access control. You may change it with any valid DN as long as
you have write access to it.

Delegation Wizard is a tool to let you add permission for containers/OUs and
perhaps also objects within. To verify the change, you can use the security
tab in an object's property page.

David
 
Thanks David. When assigning a user to the "ManagedBy" Tab what does that
accomplish? It doesn't really give them control over anything.

Thanks again!
 
When a user is assigned using the tab, the managedBy attribute of the object
will be set to the DN of the user. Some info (i.e. office, address, phone
and fax...) about the assigned user will be listed in the same tab if they
have been set and you have permission to read them. It has nothing to do
with the user's actual permission on the object. You may set it to the user
who manages the object and therefore has certain control over it. It's
perhaps easier to find out who to contact for a particular resource by
looking up this attribute of the object rather than walking through its DACL
to figure out who can do what...

David
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Sarah Clements said:
Thanks David. When assigning a user to the "ManagedBy" Tab what does that
accomplish? It doesn't really give them control over anything.

Thanks again!


David Hou said:
Managed By Tab is used to view/change managedBy attribute. It has
Click to expand...
nothing
Click to expand...
 
Back
Top