You are currently offline, waiting for your internet to reconnect

How to Delegate Basic Server Administration To Junior Administrators.

Support for Windows Server 2003 ended on July 14, 2015

Microsoft ended support for Windows Server 2003 on July 14, 2015. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

Author:
Nirmal Sharma MVP
COMMUNITY SOLUTIONS CONTENT DISCLAIMER
MICROSOFT CORPORATION AND/OR ITS RESPECTIVE SUPPLIERS MAKE NO REPRESENTATIONS ABOUT THE SUITABILITY, RELIABILITY, OR ACCURACY OF THE INFORMATION AND RELATED GRAPHICS CONTAINED HEREIN. ALL SUCH INFORMATION AND RELATED GRAPHICS ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT AND/OR ITS RESPECTIVE SUPPLIERS HEREBY DISCLAIM ALL WARRANTIES AND CONDITIONS WITH REGARD TO THIS INFORMATION AND RELATED GRAPHICS, INCLUDING ALL IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, WORKMANLIKE EFFORT, TITLE AND NON-INFRINGEMENT. YOU SPECIFICALLY AGREE THAT IN NO EVENT SHALL MICROSOFT AND/OR ITS SUPPLIERS BE LIABLE FOR ANY DIRECT, INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF USE, DATA OR PROFITS, ARISING OUT OF OR IN ANY WAY CONNECTED WITH THE USE OF OR INABILITY TO USE THE INFORMATION AND RELATED GRAPHICS CONTAINED HEREIN, WHETHER BASED ON CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY OR OTHERWISE, EVEN IF MICROSOFT OR ANY OF ITS SUPPLIERS HAS BEEN ADVISED OF THE POSSIBILITY OF DAMAGES.
SUMMARY
This article explains or contains articles which contains information about delegation of Tasks.
MORE INFORMATION
Here is a complete list of articles for delegating controls to admins:
 
You can delegate permissions to junior Admins using MMC Taskpads.
 
How to use Adminpak.msi to install a specific server administration tool in Windows

 
HOW TO: Delegate Administrative Authority in Windows 2000

 
HOW TO: Create and Edit a Taskpad View in a Saved MMC Console in Windows 2000

 
Default Security Concerns in Active Directory Delegation

 
Delegate Control Wizard Cannot Be Used to Remove Groups or Users

 
Administrative Tool Menu Is Sensitive to User's Permissions

 
In a Server 2003 domain, you can ignore the part about editing dssec.dat:
 
How To Delegate the Unlock Account Right

 
A must read for Domain Administrators:
 
Design Considerations for Delegation of Administration in Active Directory
 
*Achieving Autonomy and Isolation with Forests, Domains, and Organizational Units*

 
Using scripts you can set delegation on properties if you want:
 
Part 1

 
Part 2

 
You can find security attributes for each object in Chapter -6 of *Inside Active Directory-Second Edition*



Properties

Article ID: 555986 - Last Review: 09/18/2007 02:27:26 - Revision: 1.0

Microsoft Windows Server 2003, Datacenter Edition (32-bit x86), Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Standard Edition (32-bit x86), Microsoft Windows Server 2003, Web Edition

  • kbpubmvp kbpubtypecca kbhowto KB555986
Feedback
ody>body>