Using the delegate control method in AD
The delegate control method also works similarly to ACLs, but it simplifies privilege management as it uses the following:
- The Delegation of Control Wizard can be used to apply delegated permissions
- A predefined task list is available via the wizard and we can easily map permissions to these tasks
This wizard contains the following predefined tasks, which can be used to assign permissions:
- Create, delete, and manage user accounts
- Reset user passwords and force a password to change at the next logon
- Read all user information
- Create, delete, and manage groups
- Modify the membership of a group
- Manage Group Policy links
- Generate Resultant Set of Policy (Planning)
- Generate Resultant Set of Policy (Logging)
- Create, delete, and manage inetOrgPerson accounts
- Reset inetOrgPerson passwords and force a password change at the next logon
- Read all the inetOrgPerson...