Exercise 15.4 Delegating Administration

Overview - In this exercise, you use the Delegation of Control Wizard to grant
Active Directory permissions to specific groups.
Mindset - How do you delegate administrative privileges to users without giving themfull control?
Completion time 10 minutes



1. On the SERVERA computer, in the Active Directory Users and Computers console, right-click the Rome OU and, from the context menu, select Delegate Control. The Delegation of Control Wizard appears, displaying the Welcome page.
2. Click Next. The Users or Groups page appears.
3. Click Add, The Select Users, Computers, or Groups dialog box appears.
4. In the Enter the object names to select box, type Rome Managers and click OK.
The group appears on the Users or Groups list.
5. Click Next. The Tasks to delegate page appears (see Figure 15-5).

Figure 15-5
The Delegation of Control Wizard



 6. In the Delegate the following common tasks list, select the following check boxes:
 Create, delete, and manage user accounts
 Create, delete, and manage groups
 Modify the membership of a group
 7. Click Next. The Completing the Delegation of Control Wizard page appears.

 8. Click Finish.

 End of the lab.