Delegating control of group membership
(Intended Audience) Thisdocument is intended for the System Administrator at ………..
Document Ref &Version No:V1.0Author: Approved by:Revision Due Date: 1 year from issue Issue Date:
Document Title:File Name:Author:Date:
1.0 Initial Draft 13/07/20101.1 Final Draft
The purpose of this document is to aid the System Administrator at ……… provide trustedusers who manage access to group membership the ability to do so via a local snap-inthereby reducing unnecessary group membership support requests to the servicedesk.
As your AD infrastructure grows, managing the growing number of users, groups andcomputers becomes increasing time consuming. Fortunately Active Directory has the abilityto delegate administrative control over specific objects to lower-level administrators.Assigning a domain user as the manager of the group has the following advantages:
Assigns a contact for the group: This gives the administrator a designated person tocontact if there are any questions about the group membership.
Delegation: This allows the administrator to designate a domain user to manage theadditions and deletions to the group.Delegating the management of a group allows the administrator to assign the process of maintaining the membership of a group to someone who will probably be more familiar withthe changes needed to be made to the group usually someone like a department or resourcemanager.
Last updated: 13/07/20101 of 12v1.0