Using Active Directory Users and Computers

By far, the easiest way to perform delegation of control is using the Delegation of Control Wizard from Active Directory Users and Computers (dsa.msc). Follow these steps:

Open Active Directory Users and Computers (dsa.msc):

Right-click the OU you want to delegate control over, and select Delegate control… from the menu.
The Delegation of Control Wizard appears:

On the Welcome to the Delegation of Control Wizard screen, click Next >.
In the Users or Group screen, click the Add… button to select one or more users or groups to whom you want to delegate control.
In the Select Users, Computers, or Groups popup, select the groups you want to delegate to.
Click OK when done.

On the Users or Group screen, click Next > to continue to the next screen of the Delegation of Control Wizard:

On the Tasks to Delegate screen, select the common task(s) you want to delegate from the list below Delegate the following common tasks or select the Create a custom task to delegate option to go at it from scratch.

When you select Create a custom task to delegate, select the object(s) and action(s) on the Active Directory Object Type screen and the permissions on the Permissions screen.

On the Completing the Delegation of Control Wizard screen, click Finish.

The resulting delegation permissions (Access Control Entries or ACEs) can now be viewed on the Security tab of the properties of the OU.

本周热推：

计算机网络安全原理 Web应用漏洞扫描产品原理与应用 Web安全漏洞原理及实战从0到1：CTFer成长之路黑客攻防入门