There is no wizard to do such, you would have to look at the permissions on the OU to
see what a particular users or group has. All the delegation wizard does is create
the needed permissions. It may help to compare permissions to a default OU [which you
could easily create] to see where differences in permissions exist. You can also use
dsacls to view [as in dsacls ou=myou,dc=mydomain,dc=com] and manage AD permissions on
objects and it can also reset permissions back to default with the /d switch. ---
Steve
You can look at the delegated permissions either through dsacls or the security
tab of the object you are concerned about. This works on either 2K or K3.