I've got a need to
create a group that specifically administers trusts in Active Directory
(external trusts between a single AD Domain and external NT4 domains).
This group will be populated with administrators that shouldn't have global
administrative rights in AD, but should be able to create, delete and manage
trusts. Does anyone have experience with this? If possible, I'd like
to get a list of the rights necessary for just this specific grouping of
tasks.
Thanks,
Scott
Rachui
