Updates from QA Training

Delegating Administration Permissions In Windows Server 2012

If you employ lots of Administrators the ability to delegate tasks of varying complexity is important


Bryan O'Connor | 8 April 2013

If you employ lots of Administrators the ability to delegate tasks of varying complexity is important

One of the courses I teach is the Microsoft Windows 2012 Installing and Configuring course, the Microsoft designation is the 20410B .

In the presentation, we look at delegating administrative tasks in Active Directory in Windows Server 2012.

By default, the Enterprise Admins, Domain Admins, Administrators, and Account Operators groups have permission to create computer objects in any new OU. However, as discussed earlier, we recommend that you tightly restrict membership in the first three groups, and that you do not add Administrators to the Account Operators group.

Instead, you should delegate the permission to create computer objects (called Create Computer Objects) to appropriate administrators or support personnel. This permission, which is assigned to an OU's group, allows group members to create computer objects in that OU. For example, you might allow your desktop support team to create computer objects in the clients OU, and allow your file server administrators to create computer objects in the file servers OU.

To delegate permissions to create computer accounts, you can use the Delegate Control Wizard to choose a custom task to delegate. When you delegate permissions to manage computer accounts, you might consider granting additional permissions beyond those required to create computer accounts. For example, you might decide to allow a delegated administrator to manage the properties of existing computer accounts, to delete the computer account, or to move the computer account.

This demonstration shows you how to create delegated administrators in Windows Server 2012.

The demonstration is available at the BryanQA Youtube site

Bryan O'Connor

Senior Technical Instructor

Bryan O’Connor is a Senior Technical Instructor at QA, teaching VMware, Microsoft and CompTIA courses. In the past, Bryan has also been certified by Novell as a MCNI (Master Certified Novell Instructor). Bryan started in the world of IT in 1986 and has worked in a variety of roles ranging from PC support technician to Network design and consultancy, to Virtualisation consultant. At last count, Bryan held over 40 professional VMware, Microsoft, Novell and CompTIA certifications. Bryan has advised many large organisations on their IT and project management needs to allow them to benefit from the increase in productivity provided by computer systems. In addition to teaching, Bryan does a variety of jobs in QA, including supporting the sales staff and setting up the classrooms. Outside of QA, Bryan enjoys spending time with his wife Tracey and their two daughters Meagan and Jessica, unless there’s a grand prix on the TV when he enjoys paying Tracey, Meagan and Jessica to disappear for the day.
Talk to our learning experts

Talk to our team of learning experts

Every business has different learning needs. QA has over 30 years of experience in combining the highest quality training with the most comprehensive range of learning services, ensuring the very best fit for your organisation.

Get in touch with our learning experts to talk about how we can help.