Delegating the Administration of Windows Server 2008 Active Directory Domain Services

Additional Resources

The following resources contain additional information and tools related to this chapter.

Related Information

• Chapter 5, “Designing the Active Directory Domain Services Structure,” provides details on planning the structure of Active Directory such as site, domain, organizational unit, and forest designs.

• Chapter 6, “Installing Active Directory Domain Services,” provides details on delegating administration for Read-Only Domain Controllers.

• Chapter 8, “Active Directory Domain Services Security,” provides additional details on Active Directory security basics and authentication.

• “Best Practices for Delegating Active Directory Administration” located at http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/actdid1.mspx.

• “Best Practices for Delegating Active Directory Administration Appendices” located at http://www.microsoft.com/downloads/details.aspx?FamilyID=29dbae88-a216-45f9-9739-cb1fb22a0642&DisplayLang=en.

• “Delegating Authority in Active Directory” located at http://www.microsoft.com/technet/technetmag/issues/2007/02/ActiveDirectory/default.aspx.

• “Using Scripts to Manage Active Directory Security” located at http://www.microsoft.com/technet/scriptcenter/topics/security/exrights.mspx.

• “Sample Scripts to Manage Active Directory Delegation and Security” located at http://www.microsoft.com/technet/scriptcenter/scripts/security/ad/default.mspx?mfr=true.

• “Step-by-Step Guide to Using the Delegation Of Control Wizard” located at http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/stepbystep/ctrlwiz.mspx.

• “Default Security Concerns in Active Directory Delegation” located at http://support.microsoft.com/?kbid=235531.