CurtisC said:
I am trying to delegate the responsibility of installing software and
managing printers to a specific group. Under what custom object would I be
able to allow them to do so?
My suggestion is to test with a couple of accounts.
An Organizational Unit can hold users, computers, shares, printers and a few
other objects depending whether you are in mixed mode or native mode. An OU
is the functional equivalent of an NT4 domain with the benefits of
hierarchy. A GPO link can be used to assign or publish a software deployment
where a user can install software without having elevated privileges.
HOW TO: Assign Software to a Specific Group By Using a Group Policy
http://support.microsoft.com/default.aspx?scid=kb;en-us;302430
First, create an OU like, for example, "Sales". Create a group called
"SalesManagers" and another named "SalesUsers" and give the targetted users
membership to these groups. Create or move the 2 groups to the Sales OU.
Create a printer and shares in the Sales OU. You can then run the delegate
wizard or manually link a new GPO and assign unique rights to the 2 sets of
groups. Keep in mind that a delegated administrator can also be a member of
a user group.
Basicly, the OU and GPO link can be designed to mimic your organization
structure and delegate rights appropriately. You can also distribute an MMC
console that limits the abilities of the delgated managers if you want to
harden the domain/forest's security.
