Hello,
We’re in the process of creating a whitepaper on Delegation of
Administration in Active Directory.
This whitepaper/guide is intended to provide authoritative guidance on how
to optimally use the delegation capabilities offered by Active Directory
and how to maximize the benefits that these capabilities offer. This
whitepaper/guide will educate customers on the various administrative
categories of Active Directory and will provide recommendations,
best-practices and in-depth coverage on how to implement delegation of
administration in their Active Directory deployments. This guide will cover
all Active Directory Service and Data Administration tasks and it will also
cover addressing delegation of server administration of Domain Controllers
and delegation of non-AD services running on Domain Controllers.
This whitepaper/guide will also provide customers a comprehensive list of
all Active Directory administration tasks including, how to delegate them,
who can perform these tasks out of the box and recommendations and
best-practices around how to best delegate these tasks. It is our intention
to try and also add to this list, security ramifications of delegating a
task and describe what audit settings to specify to audit the execution of
these tasks.
Please continue to check back.
PS. I will also add this email address to the list of customers wanting
this information.
Thank You.
(e-mail address removed)
This posting is provided "AS IS" with no warranties, and confers no rights.