Mastering Active Directory - Second Edition

Delegating control

Administrators can delegate control based on OUs. This will provide control to individuals or groups to manage objects within OUs.

In my demonstration, I am going to provide delegated control for Asia IT Team members to manage objects under the Asia OU:

1. To do that, log in to the domain controller as the Domain Admin and open ADUC. Then, right-click on the relevant OU and click on Delegate Control...:

2. Then, it will open up the wizard; there, select the individuals or groups that you'd like to provide delegated controls to. In this demonstration, this is Asia IT Team (REBELADMIN\Asia IT Team):

3. In the next window, the ...