Active Directory Administration Cookbook

Delegating control of an OU

In large Active Directory environments, the administrative burden may be high. Therefore, in environments with several teams of administrators and service desk personnel, delegation is needed. This way, for instance, service desk personnel may reset passwords, application administrators may change group memberships, and only true Active Directory admins may manage OUs.