Administer Active Directory - MCSA Windows Server 2012 R2: Installation and Configuration Study Guide - page 261

Delegating Control of OUs

In simple environments, one or a few system administrators may be responsible for manag-
ing all of the settings within Active Directory. For example, a single system administrator
could manage all users within all OUs in the environment. In larger organizations, how-
ever, roles and responsibilities may be divided among many different individuals. A typical
situation is one in which a system administrator is responsible for objects within only a few
OUs in an Active Directory domain. Alternatively, one system administrator might manage
User and Group objects while another is responsible for managing file and print services.
Fortunately, using the Active Directory Users and Computers tool, you can quickly and
easily ensure that specific users receive only the permissions they need. In Exercise 5.3, you
will use the Delegation of Control Wizard to assign permissions to individuals. To complete
these steps successfully, first you must have created the objects in the previous exercises of
this chapter.

e x e r c i s e 5 . 3

using the Delegation of control wizard

1.

Click the Windows key on the keyboard and choose Administrative Tools.

2. Open the Active Directory Users and Computers administrative tool.

3.

Right-click the Corporate OU within the North America OU and select Delegate Control.
This starts the Delegation of Control Wizard. Click Next to begin configuring security
settings.

4. In the Users Or Groups page, click the Add button. In the Enter The Object Names To

Select field, enter Account Operators and click the Check Names button. Click OK. Click
Next to continue.

5.

In the Tasks To Delegate page, select Delegate The Following Common Tasks and place
a check mark next to the following items:

Create, Delete, And Manage User Accounts

Reset User Passwords And Force Password Change At Next Logon

Read All User Information

Create, Delete, And Manage Groups

Modify The Membership Of A Group

6.

Click Next to continue.