Welcome to Scribd, the world's digital library. Read, publish, and share books and documents. See more
Download
Standard view
Full view
of .
Look up keyword
Like this
5Activity
0 of .
Results for:
No results containing your search query
P. 1
AD Delegating Control of Group Membership

AD Delegating Control of Group Membership

Ratings: (0)|Views: 2,723|Likes:
Published by Paul

More info:

Published by: Paul on Nov 16, 2010
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as DOC, PDF, TXT or read online from Scribd
See more
See less

02/06/2013

pdf

text

original

 
Delegating control of group membership
Knowledgebase
(Intended Audience) Thisdocument is intended for the System Administrator at ………..
Document Ref &Version No:V1.0Author: Approved by:Revision Due Date: 1 year from issue Issue Date:
Document Control:
Document Title:File Name:Author:Date:
13/07/2010
Version Control:
Version
:
Reason forChangeAuthor/Editor:
Date:
1.0 Initial Draft 13/07/20101.1 Final Draft
Purpose
The purpose of this document is to aid the System Administrator at ……… provide trustedusers who manage access to group membership the ability to do so via a local snap-inthereby reducing unnecessary group membership support requests to the servicedesk.
Software Overview
As your AD infrastructure grows, managing the growing number of users, groups andcomputers becomes increasing time consuming. Fortunately Active Directory has the abilityto delegate administrative control over specific objects to lower-level administrators.Assigning a domain user as the manager of the group has the following advantages:
Assigns a contact for the group: This gives the administrator a designated person tocontact if there are any questions about the group membership.
Delegation: This allows the administrator to designate a domain user to manage theadditions and deletions to the group.Delegating the management of a group allows the administrator to assign the process of maintaining the membership of a group to someone who will probably be more familiar withthe changes needed to be made to the group usually someone like a department or resourcemanager.
Last updated: 13/07/20101 of 12v1.
 
Delegating control of groupmembership
ProcedureStep 1Create a management security group
When we start the Administration Delegation Wizard, it prompts you to specify the users and groupsto which you want to apply the security role. It is recommended that you place your users intosecurity groups, and then use the wizard to apply roles against those groups. Applying permissionsto individual users can quickly become difficult to manage.A management security group titled groupManagers (replace group with the appropriate group) isinitially created for the trusted users which we wish to delegate control of group membership, this willenable them to add or remove any user account for that group.
1.
In AD select the Groups OU and right click, then select
New
and
Group
from the sub-menu.
2.
Enter the name groupManagers in the Group name box.i.e.
ElectronicTriageSystemManagers
3.
Verify the Group scope is set to Global. Group type is Security Select
OK
4.
Double click on the new
ElectronicTriageSystemManagers
Select the Members tab, click the
Add
button and select the user accounts that are to manage the group membership.Select
OK
and leave Active Directory Users and Computers open
Last updated: 13/07/20102 of 12v1.
 
Delegating control of groupmembership
Step 2Delegate administrative control of an OU
Group membership administration is granted in the OU where the group account resides.To delegate administrative control of an OU create the OU if non already exists and move thegroup to manage and the management group into the OU
5.
In AD right-click the appropriate OUSelect
Delegate Control
from themenu. This will launch
Delegation of Control Wizard
6.
Welcome to the Delegation of Control Wizard
pageClick
Next
.
Add the Group Managers
7.
In the
Users or Groups
pageClick
Add
, type the appropriate
managers security group
for whichyou want to delegate administrationClick
OK
and
Next
.
Last updated: 13/07/20103 of 12v1.

Activity (5)

You've already reviewed this. Edit your review.
1 hundred reads
1 thousand reads
Jonathan R Jaffe liked this
gopi_hc liked this
Bethany Reinhold liked this

You're Reading a Free Preview

Download
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->