Mastering Active Directory - Second Edition

Using the delegate control method in AD

The delegate control method also works similarly to ACLs, but it simplifies privilege management as it uses the following:

• The Delegation of Control Wizard can be used to apply delegated permissions.
• A predefined task list is available via the wizard and we can easily map permissions to these tasks.

This wizard contains the following predefined tasks, which can be used to assign permissions:

• Create, delete, and manage user accounts.
• Reset user passwords and force a password to change at the next logon.
• Read all user information.
• Create, delete, and manage groups.
• Modify the membership of a group.
• Manage Group Policy links.
• Generate Resultant Set of Policy (Planning).
• Generate Resultant Set of Policy ...