Active Directory Permission delegation (1)

When we manage a larger environment, we usually delegate some authority to others, and we have achieved the goal of reducing our own burdens, such as delegating to the department manager; I demonstrated only a secret reset the permissions, as for the other permissions, the delegation method is the same, but the choice of permissions are not the same;

1. Open "Active Directory Users and Computers" to locate the OU you want to delegate, and right-click to select "Delegate control" to open the delegation of Control wizard;

650) this.width=650; "title=" 1.PNG "alt=" wkiom1stxemaynynaajra7plqdo393.jpg "src=" http://s3.51cto.com/wyfs02/M01/ 57/30/wkiom1stxemaynynaajra7plqdo393.jpg "/>

2, in the Welcome to the Control Wizard page, select "Next";

650) this.width=650; "title=" 2.PNG "alt=" wkiom1stxglslrggaagctdbpwp4073.jpg "src=" http://s3.51cto.com/wyfs02/M02/ 57/30/wkiom1stxglslrggaagctdbpwp4073.jpg "/>

3, under the "User or Group" page, select the "Add" button to add users or groups;

650) this.width=650; "title=" 3.PNG "alt=" wkiol1stxrbhxdsfaae3lbmsati260.jpg "src=" http://s3.51cto.com/wyfs02/M00/ 57/2d/wkiol1stxrbhxdsfaae3lbmsati260.jpg "/>

4. Enter the name of the user or group (I'm using a user, a group that is sometimes used in a production environment, such as a management group, etc.); Check the correctness of the input user or group name by the Check Name button, if the full name of the user or group is correct, and if you do not know the name of the specific user or group Advanced "to find; then select" OK ";

650) this.width=650; "title=" 4.PNG "alt=" wkiom1stxieh-dvzaafcwavptzw712.jpg "src=" http://s3.51cto.com/wyfs02/M01/ 57/30/wkiom1stxieh-dvzaafcwavptzw712.jpg "/>

5, return to the user or group page, select "Next";

650) this.width=650; "title=" 5.PNG "alt=" wkiom1stxjejiv3daafhzg6dbxs534.jpg "src=" http://s3.51cto.com/wyfs02/M02/ 57/30/wkiom1stxjejiv3daafhzg6dbxs534.jpg "/>

6, select the permissions you want to delegate, I choose to "Reset the user password and force the password to be changed at the next logon" in the common tasks, of course, you can also choose other tasks in common tasks, or you can customize the delegation;

650) this.width=650; "Title=" 6A. PNG "alt=" wkiol1stxw6w8g8vaahb8owqgve766.jpg "src=" http://s3.51cto.com/wyfs02/M00/57/2D/ Wkiol1stxw6w8g8vaahb8owqgve766.jpg "/>

7. Select "Done" on the Completing the Control Delegation Wizard page;

650) this.width=650; "Title=" 7A. PNG "alt=" wkiom1stxn_xc9l9aaigyoxrkrk532.jpg "src=" Http://s3.51cto.com/wyfs02/M02/57/30/wKiom1STxn_ Xc9l9aaigyoxrkrk532.jpg "/>

The assignment is done, but how do users use it?

You first need to install Remote Administration Tools (RSAT) on the user's computer (that is, the user you delegated permissions to)

Windows 7 http://www.microsoft.com/zh-cn/download/details.aspx?id=7887

Windows 8 http://www.microsoft.com/zh-cn/download/details.aspx?id=28972

Windows 8.1 http://www.microsoft.com/zh-cn/download/details.aspx?id=39296

Note that WIN8 can no longer be used on win8.1;

Download good, install Remote administration Tools on client:

1, double-click the download down the installation file, (I installed three times, two times in this interface for a while, there is a quick installation interface)

650) this.width=650; "title=" 1.PNG "alt=" wkiom1stxrltr0gdaacjucdcfbo006.jpg "src=" http://s3.51cto.com/wyfs02/M00/ 57/30/wkiom1stxrltr0gdaacjucdcfbo006.jpg "/>

2. On the License Agreement page, select "I accept";

650) this.width=650; "title=" 2.PNG "alt=" wkiol1stx2wcvrsdaakeylea2mu626.jpg "src=" http://s3.51cto.com/wyfs02/M01/ 57/2d/wkiol1stx2wcvrsdaakeylea2mu626.jpg "/>

3, is installed;

650) this.width=650; "title=" 3.PNG "alt=" wkiol1stx3kwuixraaehbcu7xau514.jpg "src=" http://s3.51cto.com/wyfs02/M02/ 57/2d/wkiol1stx3kwuixraaehbcu7xau514.jpg "/>

4, the installation is complete, and select "Off";

650) this.width=650; "title=" 4.PNG "alt=" wkiom1stxt3jm47maacsy2dialo932.jpg "src=" http://s3.51cto.com/wyfs02/M02/ 57/30/wkiom1stxt3jm47maacsy2dialo932.jpg "/>

Active Directory Permissions Delegation (2): http://yupeizhi.blog.51cto.com/3157367/1591724

This article is from the "Snow Orchid" blog, please be sure to keep this source http://yupeizhi.blog.51cto.com/3157367/1591721

Active Directory Permission delegation (1)