Mastering Active Directory

Delegating permissions

In an Active Directory environment, there are lots of management tasks. Managing domain controllers, adding / managing / removing users, adding / managing / removing groups, password resets, and adding devices to computers are just some of them. In a structured IT department, these management tasks can be bound to different roles. As an example, let's assume Rebeladmin Corp.'s IT department has first-line (first support contact), second-line (intermediate), and third-line (seniors) IT engineers.

When considering the Active Directory management tasks, first-line engineers are usually involved with user password resets, setting up new user accounts and groups, adding devices to domains, and so on. Second-line engineers ...