OU Admins?

  • Thread starter Thread starter Nathan Guidry
  • Start date Start date
N

Nathan Guidry

Ok, I mades some OU groups, and now I would like to make a person in each of
the OUs an administrator of that OU only. Basically a person that could
unlock accounts, add workstations to their OU, basic administration. How do
I do this and make sure they cannot administer another OU or the domain?
 
Delegation of authority. Right-click on the OU > Delegate Control and follow
the prompts.

hth,
Chris
 
Nathan Guidry said:
Ok, I mades some OU groups, and now I would like to make a person in each of
the OUs an administrator of that OU only. Basically a person that could
unlock accounts, add workstations to their OU, basic administration. How do
I do this and make sure they cannot administer another OU or the domain?
Click to expand...

Paul gave you a good link and what you wish
to do it fine, but do notice that you CAN give
anyone the delegated authority to manage ANY
OU -- even someone from another (trusted)
Domain.

They don't have to be in the same OU (or even
the same domain.)

That is a just a choice.

And for many common types of delegation you
can just "right click" on the OU and choose the
"Delegaton of Control..." wizard.

Or (in Advanced view) you can right-click->
Properties and use the Security (permissions)
tab to give out such control explicitly -- it looks
almost excactly like file permissions.
[/QUOTE]
 
Back
Top