Need to delegate AD rights to group of users

Question

Hi Team,
I am currently in process of delegation right for some users in servicedesk. They should be able to perform following 
1. To enable users to unlock/ reset passwords
2. Then by giving certain users enhanced AD/ Exchange rights to create distribution lists.
Currently we are using AD 2008. Can some expert help me in creating such customized delegation using step by step?
Thanks in advance.
Regards,
Bunty Shah
Windows server analyst
Regards, Bunty Shah

Answer 1

In a LOOP while processing the table.. look at the use of AT NEW OF <field>.
AT END OF f.
Effect
f is a field from the field group HEADER. The enclosed sequence of statements is executed if
the field f occurs in the sort key of the extract dataset (and thus also in the field group HEADER) and
the field f or a superior sort criterion has a different value in the current LOOP line than in the preceding (AT NEW) or subsequent (AT END OF) record of the extract dataset.
If f is not an assigned field symbol, the control break criterion is ignored, and the subsequent sequence of statements is not executed. If a field symbol is assigned, but does not point to the HEADER field group, the system triggers a runtime error.
Example
DATA: NAME(30),
      SALES TYPE I.
FIELD-GROUPS: HEADER, INFOS.
INSERT: NAME  INTO HEADER,
        SALES INTO INFOS.
LOOP.
  AT NEW NAME.
    NEW-PAGE.
  ENDAT.
  AT END OF NAME.
    WRITE: / NAME, SUM(SALES).
  ENDAT.
ENDLOOP.
Notes
If the extract dataset is not sorted before processing with LOOP, no control level structure is defined and the statements following AT NEW or AT END OF are not executed.
Fields which stand at hex zero are ignored by the control break check with AT NEW or AT END OF. This corresponds to the behavior of the SORT statement, which always places unoccupied fields (i.e. fields which stand at hex zero) before all occupied fields when sorting extract datasets, regardless of whether the sort sequence is in ascending or descending order.