Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com�s entire library of video tutorials.
Later in this training we are going to talk a lot more about permissions for OUs but it should be mentioned here that we can delegate administrative authority, without really having to understand all of the settings in a discretionary access controllers. The reason that we can that we have Wizard that helps us to do that. We have got the delegation of the administrative control wizard so let us take a look how that wizard works. What we are going to do is we are going to go into the active directory users and computers concepts. So we are going to click on start and then on administrative tools and active directory users and computers. And within the active directory users and computer's console we are going to delegate the administrative authority to our Management OU, and then we are going to delegate administrative authority of management OU to some people to say L Crosskey and Bill Black. So let us right click on the management OU and then we click on delegate control, which takes us into our delegation of control wizard. Then click on next and it says ok, who would you like to delegate control to? Typically we are going to delegate control to groups. So the group that we delegate control to would be a group of administrators or a group that for some reason need to have control this particular department. May be sub administrators, mini administrators. In this case we are just going to use our user account name so we are going to say Bill and ok then add ** L, add, ok. So for Bill Black and L Crosskey we are going to delegate the administrative control. Well to do that? We are going to click on next. These are common tasks that we may want to delegate create, delete manage user accounts, reset user password, read user information. So these are common tasks. We can also create a custom task. We click on create custom task and then next we can say that we only want them to be able to use to be able to have control over certain objects. So we said we only want them to be able to change the password or user accounts, then we will come down to user accounts alphabetical order, user objects, And then click on next and what we want them to be able to do is just to be able to help, full control of accounts of, *** properties or where ever it is. In this case they will be able to change password. So, change password and then next and system then say oh! ok so what you have done is you want Bill Black and L Crosskey to be able to change passwords of users. We said yes, that is what we want. Click on finish and what the system will do then is modify the discretionary access control list for the OU. And add the accounts of Bill Black and L Crosskey. So that they have the permissions that they need to have. So the nice thing about the wizard is that we put in basically in plane English what we want to happen and then it will modify the discretionary access control list the way it needs to. In little while we will take a look at the permissions for OUs. Take a look at how discretionary access control list was modified when we set up delegation using the delegation control wizard. First we are going to take a look at how we use organizational units to distribute policies. That is next.
| Course: | Microsoft Windows Server 2003 (70-290) |
| Author: | Bill Ferguson/Certified Instructor |
| SKU: | 33497 |
| ISBN: | 1932072918 |
| Release Date: | 2004-06-03 |
| Duration: | 8.5 hrs / 107 lessons |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |