This works similar to ACLs, but it simplifies the privilege management as it uses the following:
- The Delegation of Control Wizard can be used to apply delegated permissions
- Predefined tasks can be used and permissions are assigned to those tasks
This wizard contains the following predefined tasks, which can be used to assign permissions:
- Create, delete, and manage user accounts
- Reset user passwords and force a password change at the next logon
- Read all user information
- Create, delete, and manage groups
- Modify the membership of a group
- Manage Group Policy links
- Generate Resultant Set of Policy (Planning)
- Generate Resultant Set of Policy (Logging)
- Create, delete, and manage inetOrgPerson accounts
