Delegating the Administration of Windows Server 2008 Active Directory Domain Services
The following resources contain additional information and tools related to this chapter.
Chapter 5, “Designing the Active Directory Domain Services Structure,” provides details on planning the structure of Active Directory such as site, domain, organizational unit, and forest designs.
Chapter 6, “Installing Active Directory Domain Services,” provides details on delegating administration for Read-Only Domain Controllers.
Chapter 8, “Active Directory Domain Services Security,” provides additional details on Active Directory security basics and authentication.
“Best Practices for Delegating Active Directory Administration” located at http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/actdid1.mspx.
“Best Practices for Delegating Active Directory Administration Appendices” located at http://www.microsoft.com/downloads/details.aspx?FamilyID=29dbae88-a216-45f9-9739-cb1fb22a0642&DisplayLang=en.
“Delegating Authority in Active Directory” located at http://www.microsoft.com/technet/technetmag/issues/2007/02/ActiveDirectory/default.aspx.
“Using Scripts to Manage Active Directory Security” located at http://www.microsoft.com/technet/scriptcenter/topics/security/exrights.mspx.
“Sample Scripts to Manage Active Directory Delegation and Security” located at http://www.microsoft.com/technet/scriptcenter/scripts/security/ad/default.mspx?mfr=true.
“Step-by-Step Guide to Using the Delegation Of Control Wizard” located at http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/stepbystep/ctrlwiz.mspx.
“Default Security Concerns in Active Directory Delegation” located at http://support.microsoft.com/?kbid=235531.