RE: [ActiveDir] OU Delegation

[Grillenmeier, Guido]

check out the AD Delegation Whitepaper from our friend Sanjay Tandon (who is no longer with MS, but the document is still very useful):   Main Doc http://www.microsoft.com/downloads/details.aspx?FamilyID=631747a3-79e1-48fa-9730-dae7c0a1d6d3&DisplayLang=en Appendix http://www.microsoft.com/downloads/details.aspx?FamilyID=29dbae88-a216-45f9-9739-cb1fb22a0642&DisplayLang=en   I've also done a few detailed presentations on it, but I'm sure you'll find all you need in those docs.  In general, you are certainly on the right path to consolidate all those domains into a single one. I might even argue the root but that's a different topic and you might need that one child domain you're keeping for other reasons (but I hope you're not creating a new child domain for the sole purpose of consolidating the others...)   /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Mittwoch, 11. Januar 2006 22:24 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OU Delegation We’re in the process of consolidating 21 child domains into just one and one root.  We want to separate the divisions (domains) into different OUs.  Is there a guide or best practice out there on delegating admin permissions on OUs?  Also, we’ve got Exchange permissions to deal with too.   Devon Harding Windows Systems Engineer Southern Wine & Spirits - BSG 954-602-2469   __________________________________ This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in the message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank You.