How to Delegate Permission in an AD

Active Directory, or AD, is a feature of the server editions of the Windows operating system that allows administrators to manage users and groups. Organizational units are groups that can contain either specific users or computers. Active Directory administrators can delegate permissions to organizational groups. This allows these groups to perform certain tasks on the directory such as, for example, manage user permissions or access user information. As an administrator, you can delegate permissions by running a specific wizard.

Instructions

1. Click on the "Start" button and type "dsa.msc" in the search box. Press "Enter" to open the Active Directory Users and Computers window.

2. Right-click on the organizational group to which you wish to delegate a permission. You can find a list of all organizational groups in the left-hand pane. Select "Delegate Control." This will open the Delegation of Control Wizard.

3. Click on "Delegate the following common tasks." Activate the checkbox next to each item that you wish to delegate to the selected group. Click on "Next" and select "Finish."

References

• Microsoft TechNet: Understanding Organizational Units
• Microsoft TechNet: Delegate Control of an Organizational Unit