delegate DHCP authorization

  • Thread starter Thread starter Rolf Rettinger
  • Start date Start date
R

Rolf Rettinger

How can I delegate the DHCP authorization? I can see that a subdomain admin
doesn't have permission on the Active Directory Site &
Services/Services/NetServices Container using the dHCPClass object type! How
can I create a delegation to allow those subdomain admins to authorize their
DHCP servers?

Thanks

ROlf


Object Open:

Object Server: DS

Object Type: dHCPClass

Object Name:
CN=NetServices,CN=Services,CN=Configuration,DC=intra-global,DC=net

New Handle ID: -

Operation ID: {0,12204989}

Process ID: 264

Primary User Name: YU01DC01$

Primary Domain: EE

Primary Logon ID: (0x0,0x3E7)

Client User Name: eeadmin

Client Domain: EE

Client Logon ID: (0x0,0xB979C3)

Accesses Create Child


Privileges -

Properties:
 
-----Original Message-----
How can I delegate the DHCP authorization? I can see that a subdomain admin
doesn't have permission on the Active Directory Site &
Services/Services/NetServices Container using the dHCPClass object type! How
can I create a delegation to allow those subdomain admins to authorize their
DHCP servers?

Thanks

ROlf


Object Open:

Object Server: DS

Object Type: dHCPClass

Object Name:
CN=NetServices,CN=Services,CN=Configuration,DC=intra- global,DC=net

New Handle ID: -

Operation ID: {0,12204989}

Process ID: 264

Primary User Name: YU01DC01$

Primary Domain: EE

Primary Logon ID: (0x0,0x3E7)

Client User Name: eeadmin

Client Domain: EE

Client Logon ID: (0x0,0xB979C3)

Accesses Create Child


Privileges -

Properties:



.
Click to expand...
Rolf,

As I am sure that you know, you need to be a member of the
Enterprise Admins to authorize DHCP Servers. IIRC, you
could make the user account in question a member of the -
and this is where I do not remember exactly - DHCPxxx
group ( sorry, do not remember exactly ). Also, please
take a look at the following MSKB Articles:

http://support.microsoft.com/default.aspx?scid=kb;en-
us;246603

http://support.microsoft.com/default.aspx?scid=kb;en-
us;303351

http://support.microsoft.com/default.aspx?scid=kb;en-
us;255906

http://support.microsoft.com/default.aspx?scid=kb;en-
us;239004

HTH,

Cary
 
There is a potential problem in that it is all or nothing delegation. The
subdomain admins can add and remove each others DHCP servers.
 
Back
Top