Question about Delegate Control to Desktop Support

I am working on delegating control to a newly formed/reclassified position in my company. This role will primarily provide Desktop Support. They will have little to no need to log into servers.
I have already gave them admin rights to the end users machines, now I just need to grant them the proper rights in ADUC/Exchange so they can properly perform their role.
Here is what they will need to do:
User account lifecycle management (Create, change, delete, change password, etc)
Computer account lifecycle management (Create, change, delete)
Security & Distribution Group membership management (Create, change, delete)
Exchange mailbox creation (Exchange Recipient Administrators)
Run RSOP for GPO
Basically, I want them to have full control over user, computer and group objects. This way they can create users, change group memberships,  add computers to domain, delete computer objects, etc.
The problem I am having, I am not sure what rights I need to grant them via the delegate control wizard to accomplish all of that. I know I could just grant them "Full Control" of the OU structure containing all of our user, computer and group
objects, but would like to avoid that unless its really what I need to do in the end.
Any assistance would be appreciated!
Thanks!

I would not recommend providing Full control over user, computer and group objects. Provide permission based on the tasks that they need to perform. The following articles
should help you:
User/computer/Add remove members to Groups Delegation
http://kpytko.pl/2012/05/16/active-directory-rights-delegation-overview/
http://kpytko.pl/2012/05/26/active-directory-rights-delegation-part-2/
http://social.technet.microsoft.com/wiki/contents/articles/6477.how-to-view-or-delete-active-directory-delegated-permissions.aspx
Exchange Mailbox Delegation :
http://blogs.technet.com/b/matabra/archive/2011/09/16/how-to-create-a-custom-recipient-management-group-using-exchange-2010-rbac.aspx
Run RSOP for GPO Delegation:
http://technet.microsoft.com/en-us/library/cc758756(v=ws.10).aspx

Similar Messages

  • Question about fan control MSI MPower

    Hi, Cosimo from Italy, sorry for my bad english.
    I have a question about fan control with the MSI MPower.
    The MPower site says: All 4-pin PWM fan connector Onboard
    But the manual says: SYSFAN1-4 pin 4 No Use
    My question is: the Control Center Fan Utility support the fan connect SYSFAN1-4 3 Pin voltage controled or 4 Pin pulse width controled or both?
    Thanks Cosimo.

    Quote from: Bernhard on 03-October-12, 01:55:19
    The fans will run as per your percentage setting in the BIOS.
    I can't find the percentage setting in BIOS... 

  • A few questions about MacBooks and Parallels Desktop.

    I have a few questions about MacBooks and Parallels Desktop.
    1) I understand I need at least 1GB of RAM to run Parallels Desktop but what about the hard drive, is the stock 60GB drive big enough?
    2) Related to question 1, even if it was big enough to allow me to install and run Windows would the 60GB drive be enough if I wanted to install a Linux distribution as well?
    3) This has nothing to do with Parallels Desktop but thought I'd ask it here anyway, do Apple Stores carry just the stock MacBooks, or do they carry other configurations?
    Thanks
    Keith

    1. Depend on how intensive you use that HD for saving data on both Mac OS and XP. For standard installation on both OS X and XP, the space of 60 Gb is enough.
    2. Same answer as no 1. You can install all three on that HD space, but the extra spacce available will be less and less for your data. You can save your data on external or back up on cd/dvd and erase it from the HD to keep the free space.
    Remember to leave at least 2 or 3 Gb for virtual memory usage.
    3. Just call them, maybe they don't have it in store stock, but by appointment they might configure one for you before your pick-up date.
    Good Luck

  • Questions about remote control and infrared port Qosmio F20

    Hi again,
    My Toshiba Qosmio F20 comes with a remote control funcioning through a infrared device on the front of the computer.
    Regarding this I have 2 questions:
    1. How do I configure additonal functionality through the remote control? (Like launching and controlling Winamp?)
    2. How do I connect other devices, like my cellular phone, pdas etc., to the infrared device on my computer?
    Kind regards,
    Vegard

    Hi,
    the Remote Control delivered with the Qosmio F20 is designed only for Windows XP Media Center Edition (all Remote Control's which are designed for Windows XP Media Center Edition work only with Media Center or Windows Media Player). Other program's like Winamp were not supported by these Remote Control's.
    I believe, the Remote Control's are made by Microsoft and for a wide palette of product's (the Infrared Transceiver is on nearly all Media Center PC's e.g. Siemens-Fujitsu, the same). So it's a little bit tricky to support more program's then Media Center or Windows Media Player.
    For other program's you need a second Remote Control like this one:
    http://www.logitech.com/index.cfm/products/detailsharmony/GB/EN,CRID=2084,CONTENTID=9193
    br, Ben

  • Question about ANM Virtual Appliance ESX support

    Hello,
    I have a question:
    I need to install ANM 5.2 on a virtual appliance (using the .ova file).
    What ESX and vSphere versions does ANM 5.2 support?
    I don't see any information regarding this on the release notes or installation guide.
    Thanks.

    Looks like the only requirement is Vcenter and Vsphere 4 client.  So version 4.0 and up is supported.
    http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/application_networking_manager/5.1/device_support/table/sdt.html
    ANM 5.2 and 5.1 includes a plug-in that allows you to integrate ANM into  a VMware virtual data center environment. VMware is a third-party  product for creating and managing virtual data centers. Using VMware  vSphere Client, you can access ANM functionality and manage the ACE real  servers that provide load-balancing services for the virtual machines  in your virtual data center.
    To use the ANM 5.2/5.1 plug-in, you must use VMware vCenter Server and  VMware vSphere Client 4.
    For more information about using ANM in a VMware virtual data center  environment, see the User Guide for the Cisco  Application Networking Manager 5.2/5.1.

  • Question about Oracle10g Net Services'IPv6 Support

    I'm working in a network group which is studying the IPv6.Recently I installed oracle10g in the RedHat Linux-9(kernel-2.4.22,which supported the IPv4/IPv6 dual mode),but I can't configure the oracle10g in IPv6.
    I tried every method to find the solution,including read the oracle10g document,use the google,ask the support service,but there was no answer.And I can't login into the metlink to ask question because I didn't have the CSI number.
    So who can give me some advice about the configuration.Thank you very muck!

    I read the document before it was taken down a couple weeks ago. It said that IPv6 support would be introduced with Oracle11g and not back ported.
    Kind regards,
    Russ Cannon

  • Question about Grid Control Agents on a Veritas Cluster (or any cluster)

    Hi, I'm seeking advice on how to setup Grid Control agents on a Veritas Cluster.
    My cluster is made up of two Sun M4000 servers running Solaris 10 x64 (node1 and node2), and 8 virtual hosts setup to fail between the nodes. Each of these virtual hosts has several mount points from a SAN, and contain Oracle 9 and 10 homes as well as databases. The versions are 9.2.0.8 and 10.2.0.3.
    I have a full grid control agent install on each node to mount points that don't fail over to the other nodes. These agents monitor the nodes themselves.
    Now for my question, is it better to do full intalls of the grid agent in each virtual host or to use the "emctl deploy agent" from the full installs already on node1 and node2 to the virtual hosts? Or is there some other, better way to do this.
    Either method results in 9 grid control agents on a node if all the virtual hosts are on that box. I've experimented with both agent deploys and installs a bit and found that the cpu usage goes though the roof with that many agents on one server. Maybe I don't have them configured correctly, but every now and then they spike cpu usage to 100%, and these servers have 8, dual core processors in them with 32GB of RAM.
    Thanks for any tips!
    Currently, my setup looks something like this, if it helps:
    ORANODE1...........................................ORANODE2
    user: oracle..........................................user: oracle
    full agent install....................................full agent install
    VirtualHost1
    user: ora_user1
    Oracle 10G Home
    repository database
    OMS install
    full agent install
    VirtualHost2
    user: ora_user2
    Oracle 9i Home
    production database
    full agent install
    VirtualHost3
    user: ora_user3
    Oracle 9i Home
    production database
    full agent install
    VirtualHost4
    user: ora_user4
    Oracle10g Home
    production database
    full agent install
    VirtualHost5
    user: ora_user5
    Oracle10g Home
    production database
    full agent install
    VirtualHost6
    user ora_user6
    Oracle10G Home
    production database
    full agent install
    VirtualHost7
    user: ora_user7
    Oracle10G Home
    production database
    full agent install
    VirtualHost8
    User: ora_user8
    Oracle10G Home
    production database
    full agent install

    Will the agent 10.2.0.3 work with Grid Control 10.2.0.1
    Yes.

  • Question about OSS Notes, Archiving and Support Packages

    Hello,
    does anyone know if all the OOS notes related to archiving programs corrections (category like "performances", "program error", "advance developments",
    "legal functions", "corrections of legal functions", "problem", "exit added", "special developments"...) are all automatically appllied on SAP when a support packages is installed?
    Thank you
    Best regards
    Fabio

    Looks like the only requirement is Vcenter and Vsphere 4 client.  So version 4.0 and up is supported.
    http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/application_networking_manager/5.1/device_support/table/sdt.html
    ANM 5.2 and 5.1 includes a plug-in that allows you to integrate ANM into  a VMware virtual data center environment. VMware is a third-party  product for creating and managing virtual data centers. Using VMware  vSphere Client, you can access ANM functionality and manage the ACE real  servers that provide load-balancing services for the virtual machines  in your virtual data center.
    To use the ANM 5.2/5.1 plug-in, you must use VMware vCenter Server and  VMware vSphere Client 4.
    For more information about using ANM in a VMware virtual data center  environment, see the User Guide for the Cisco  Application Networking Manager 5.2/5.1.

  • Question about sysprep re-arranging desktop icons

    I can deploy my windows 7 image just fine, the copy profile is working as well, but I have setup the icons a specific way on the desktop on a couple of my images, and after deployment they always go back to the standard looking rows, and I lose all the customization
    of the desktop icons that I set up.
    Is there a way to tell sysprep or is there something I can do in the task sequence to keep my nice desktop icon customizations, and not have it go back to the standard rows after imaging?

    Hi,
    You could check the thirt-party below.
    "If you want to email the arrangement to someone or if you simply want to export it from the program, then you can also easily do that by saving the arrangement in ‘.dok’ format. The ‘.dok’ files can be exported and imported by DesktopOK only.
    You can even register this extension for DesktopOK but for this you will need to grand Administrator Privileges to the software."
    http://www.thewindowsclub.com/desktopok-save-restore-icon-positions
    Note: Microsoft provides third-party
    contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
    Best Regards,
    Joyce

  • 8330 Curve question about syncing Calendar to desktop

    I have not changed any settings or other issues  (as far as I know) but recently my desktop and phone could no longer sync.  It hangs up at "Getting Status info from Outlook Calendar."  And it hyangs up until I shut the computer down.  Can you solve this problem?
    AEOC

    Syncing calendars/calendar events with a supported application on your computer is a bi-directional or true sync process.
    In order to sync your iPhone's calendar and calendar events with your iPad, you need to sync both direct with iCal via the iTunes sync process unless you have a MobileMe account.
    If iCal on your Mac does not include any data - no calendar events, before the first sync with your iPhone enter one calendar event in iCal on your Mac. This will provide a merge prompt with the first sync, which you want to select. If iCal currently includes any calendar events, you will be provided a merge prompt, which you want to select. If iCal on your Mac includes some old calendar events and you don't want some of the current old calendar events in iCal available on your iPhone, delete the calendar events you no longer need or want from iCal before the first sync.
    Follow this by syncing calendar events with your iPad. If your iPad includes any calendar events that were manually entered, you will be provided a merge prompt with the first sync for this data, which you want to select.
    The same applies to syncing contacts.

  • A question about table control

    Hello Expert,
    I have created a table control with wizard using internal table. I can display the data in the table successfully. Now the new requirement is to add two buttons to sort the data in ascending or descending. But it seems that it's impossible to select the column that the user want to use as sort field.
    Does any expert tell me how i can select the column?
    Thanks & Regards, Johnny

    After doing the steps mentioned by sap fan you have to use below approach for coding.
    Your table control has structure  CXTAB_CONTROL defined in the type group CXTAB in the ABAP Dictionary and
    CXTAB_CONTROL contains a table of the structure CXTAB_COLUMN which has the attributes of a column of table control.
    Lets say you have defined table control as
    CONTROLS tab1 TYPE TABLEVIEW USING SCREEN <scr> then you have can read variable tab1-COLS[ ] into one internal table
    of type CXTAB_COLUMN (lets consider this table as tab2) then check this tab2-SELECTED, if column is selected then
    it will be 'X' else space. Accordingly sort your internal table of table control.
    Regards,
    Pawan

  • Question about keyboard control in Flash presentation

    I created a presentation in Flash. And I embedded the following keyboard control scripts so that I can pause the slide by pressing "Spacebar" and play it again by pressing "Enter".
    keyListener = new Object();
    var isStopped : Boolean = false;
    keyListener.onKeyUp = function() {
        var keyCode = Key.getCode();
        if (keyCode == 13) {
           _root.play();
    if (keyCode == 32) {
           _root.stop();
    Key.addListener(keyListener);
    I also embedded getTimer script to delay the speed of the flow so that key-point can be loaded one by one.
    stop();
    t = getTimer();
    onEnterFrame = function(){
        if(getTimer()>= t+3000){
            play();
            onEnterFrame = undefined;
    Other than the above keyboard control, I also add four buttons at the right bottom so that I can play and pause, fast forward and rewind by clicking those four buttons.
    Problems:
    1. the 1st and 2nd slide cannot be paused by the above keyboard control command.
    2. the play and pause buttons at the right bottom is not functional in the 1st and 2nd slide
    (i attached the fla for easier understanding of the above descriptions. appreciated if you can help me to figure out what goes wrong.
    http://www.beyondmusic.net/AdBanner/rm_dummy.zip

    remove all your code except your key listener code:
    keyListener  = new Object();
    var isStopped : Boolean = false;
    keyListener.onKeyUp  = function() {
        var keyCode = Key.getCode();
        if  (keyCode == 13) {
           _root.play();
    if (keyCode  == 32) {
           _root.stop();
    Key.addListener(keyListener)
    then change your frame rate so your slides display at the rate you want.

  • Question about 16:9 and Desktop player

    I authored a 16:9 Ananmorphic project where i have 2 sets of Menu. One in Widescreen and the other in 4:3. My firstplay is a script that checks for the SPRM14 setting of the player in order to choose the proper Menu aspect to display.
    Anyways, when i tested in DVDsp, everything works fine, with both setting ( letterbox and Wide ). Now, when playing on a desktop DVD machine my 16:9 menu got cropped on both side. I don't understand since I made sure the dvd player is set to Wide and the 16:9 button engaged on my monitor. Any idea ?? Thanks

    Actually, using commercial disc is not always a good reference since i've seen so many widescreen commercial DVD where the author only use one aspect ratio ( and most often 4:3 ) for the menus so your menu end up being stretched, not because your machine cannot display it but there's simply no 16:9 menu....and even if a 16:9 menu exits, there's no way for me to know if information has been cropped. Remember my 16:9 menu display fine ( no stretching ) but it is being cropped on each side.
    I check my DVD on my computer and it looks fine, no cropping. I just can't figure out why it is being cropped on the side. Oh, i have 2 pioneer consumer grade ( forgot the model ), and they both behave the same.

  • Question about Grid Control Installation

    Hello,
    I have two instances of 12i VISION apps with rdbms database 11i running on two different linux systems. I wanted to install 11g grid control to get familiar with the utility.
    Do I need to do the install on one of these linux machines or can I install it on a windows client?
    I need some help please.
    A/A

    Hello,
    I would suggest install grid control on separate server from rdbms, apps or even client machine
    Cheers

  • Urgent - Question about logging and debugging.

    Hi,
    I have a question about the logging and debugging supported by
    Weblogic 6.0. From what I understood by reading the documentation
    it has classes e.g. NotCatalogLogger class for logging the information.
    The class has one method callded
    debug() for writing the debugging information. I want to log the
    debug messages only in some situation. Can I control this using
    some property? Because the documentation says that the debug information
    is logged only if application is running in debug mode. Now how
    do I change the mode of an application??
    Thanks and Reagrds,
    Manoj

    Hi,
    I have a question about the logging and debugging supported by
    Weblogic 6.0. From what I understood by reading the documentation
    it has classes e.g. NotCatalogLogger class for logging the information.
    The class has one method callded
    debug() for writing the debugging information. I want to log the
    debug messages only in some situation. Can I control this using
    some property? Because the documentation says that the debug information
    is logged only if application is running in debug mode. Now how
    do I change the mode of an application??
    Thanks and Reagrds,
    Manoj

Maybe you are looking for

  • Send video signal to tv

    I just got the component AV cable but not sure i know how to send the video signal from the iPad to the TV.

  • Newest drivers break mic in Vista 64 (X-

    I had some older drivers on before (cant remember and apart from having to mute my mic from cycling through the speakers every time I changed to game mode my mic at least worked. Now however it does not work at all. Sometimes I get a little voice thr

  • How to do a group video-call (more than 2)?

    Hi, Does anyone know how to do group (more than 2) video calls with facetime?

  • Create new account

    Can not create new account for eprint. keep getting yellow message.  "Ajax submit failed: error, = 403 forbidden.

  • Files Not Refreshed

    Building a JSP which dynamically creates an HTML page with an included javascript file using <script LANGUAGE="JavaScript" type="text/javascript" src="myFile.js"></script> The problem is when I make changes in the file myFile.js, the changes are not