Microsoft® Windows Server 2003: Administrator’s Companion

Delegating Control

Obviously, one of the simplest ways to minimize your administrative chores is to delegate them. In a Windows NT network, the usual way to grant broad administrative rights is to make users members of the Domain Admins group. You can also parcel out administrative rights through some combination of other groups such as Print Operators or Server Operators.

These groups are still available, but Windows Server 2003 makes delegation even simpler, allowing you to assign responsibility for management of some portion of the namespace to another user or group. The recipient of the delegated authority can have complete administrative control within the area chosen but not the sweeping administrative rights inherent in being a member ...