Active Directory® for Microsoft® Windows® Server 2003 Technical Reference

Customized Tools for Delegated Administration

Active Directory in Windows Server 2003 provides powerful options for delegating administrative tasks and assigning only the precise permissions that users need to have to perform specific tasks. To complement this delegation, Windows Server 2003 Active Directory also makes it easy to develop administrative tools that fit the user’s task. For example, if you delegate the right to reset passwords for a single OU, you can also provide a very simple administrative tool that can only be used to reset passwords in the specified OU. Windows Server 2003 provides two options for creating these customized tools: You can either create a customized view of the regular MMC administrative tools, or you can create ...