Finally - the AD Delegation Whitepaper is available on
the web! There are two parts to it - the main whitepaper
explaining how delegation really works. And second the really important
appendices, which go into the details of which permissions need to be set to
which object/attribute to perform a certain task, default
permissions etc.
Best Practices for Delegating Active
Directory Administration (2.7
MB)
http://www.microsoft.com/downloads/details.aspx?FamilyID=631747a3-79e1-48fa-9730-dae7c0a1d6d3&DisplayLang=en
http://www.microsoft.com/downloads/details.aspx?FamilyID=631747a3-79e1-48fa-9730-dae7c0a1d6d3&DisplayLang=en
Best Practices for Delegating Active
Directory Administration Appendices (4.2 MB)
http://www.microsoft.com/downloads/details.aspx?FamilyID=29dbae88-a216-45f9-9739-cb1fb22a0642&DisplayLang=en
http://www.microsoft.com/downloads/details.aspx?FamilyID=29dbae88-a216-45f9-9739-cb1fb22a0642&DisplayLang=en
A few people on this
list have extensively reviewed this paper - and I am sure you'll really like it.
Enjoy
;-)
/Guido