TechNet: Event Review: Active Directory Delegation and Best Practices

Welcome to the material supporting page for this session. The materials on this page have been selected as the best matches to the content covered in the live event session.

Session Outline

In this session, we will discuss how delegation can help maintain security and solve some common organizational challenges. The session will start by reviewing delegation in Active Directory, it will look at why we need delegation, and some of the common organizational challenges that can be solved. Next, we will cover defining roles and creating tiered administration, then we will talk about secondary accounts and see how they play into delegation principles. Finally, the session will round off with a look at delegating rights and look at some tools and best practices for best managing an organization.

Session Agenda

• Active Directory Delegation
  
• Roles and Organizational Units
  
• Secondary Accounts
  
• Delegation Tools and Best Practices
  

Session Media

This session consists of a Windows Media presentation and demonstrations:

	View the session presentation View the full multimedia recording of this session.
	Download the full session Download the full multimedia recording of this session.
	Download all slides and transcripts Download just the slides and transcripts of this session.
	Demo: Defining Roles In this demonstration, we will define the roles of service administrators and data administrators, and take a look at how these roles differ from other types of roles and how they fit into a tiered model.   Play online | Download
	Demo: Defining the OU Model In this demonstration, we will look at how the Organizational Model can be defined using Organizational Units (OUs) and take a look at some of the different administrator roles within them.   Play online | Download
	Demo: Establishing Secondary Accounts In this demonstration, we'll talk about some of the scenarios where you might need to use secondary accounts. Then we'll create some secondary accounts and test them.   Play online | Download
	Demo: Using Delegation Tools In this demonstration, we'll use the DSACLS command-line tool to change access control entries, and we'll use DSREVOKE to remove permissions. Then, we'll use Group Policy to delegate the management of objects.   Play online | Download

---

Related Links

Use the following resources to learn more about topics covered in this briefing.

• Active Directory Help Desk Delegation
  

  Summary: Learn more about Active Directory task delegation and the delegation flow.

• An article Active Directory Delegation
  

  Summary: Get best practices for delegating Active Directory Adminsitration tasks in the online presentation.

• User Management Resource Administrator
  

  Summary: Find out how you can simply and enhance your Help Desk environment by using User Resource Administrator (Forms & Delegation Module).

• Feature Article: Delegate! Passing Administrative Control with Active Directory
  

  Summary: Learn more about the Active Directory administration delegation model.

• Windows Administration: Delegating Authority in Active Directory
  

  Summary: Learn more about powerful the delegation capabilities in Active Directory that address a number of security issues and simplify management tasks.

Microsoft Press Books

• Windows Server 2008 Administrator's Companion
  

  Summary: The in-depth, one-volume guide to planning, deploying, and maintaining Windows Server 2008. This comprehensive, one-volume guide delivers the details you need to successfully plan, deploy, administer, and support Windows Server 2008.

• Windows Server 2008 Security Resource Kit
  

  Summary: Definitive resource for administering security features in Windows Server 2008 from the experts. Get the definitive reference for planning and implementing security features in Windows Server 2008 with expert insights from Microsoft Most Valuable Professionals (MVPs) and the Windows Server Security Team at Microsoft.

• Windows Server 2008 Active Directory Resource Kit
  

  Summary: The definitive resource for administering Active Directory direct from the experts. Get the definitive reference for designing, deploying, and maintaining Active Directory in an enterprise environment.

• Windows Server 2008 Administrator's Pocket Consultant
  

  Summary: The practical, portable guide to administering Windows Server 2008. Here's the practical, pocket-sized reference for IT professionals who administer and support Windows Server 2008.

• Introducing Windows Server 2008
  

  Summary: Get a jump on evaluating Window Server 2008 with technical insights from Windows Server team. This practical introduction delivers real-world implementation scenarios and pragmatic advice for administering Windows Server in the enterprise.

• MCITP Self-Paced Training Kit (Exams 70-640, 70-642, 70-646): Windows Server 2008 Administrator Core Requirements
  

  Summary: All-in-one exam prep for the skills measured by the MCITP: Windows Server 2008 Administrator certification. Get in-depth training and practice with the skills measured by the core exams for Microsoft Certified IT Professional (MCITP): Windows Server 2008 Administrator certification all in one box!

Training and Certification

• Collection 5934: Introducing Microsoft Windows Server Code Name 2008 (Beta 3)
  

  Summary: In this online collection composed of four clinics, you are introduced to the new features and functionality in Windows Server 2008. This includes server virtualization, security and policy management, branch office management, centralized application access, and server management. This online collection is composed of a rich multimedia experience.

• First Look: Getting Started with Server Management in Windows Server 2008 (Beta 3): Instructor-Led
  

  Summary: This 90 minute clinic provides in-depth knowledge on the following Windows Server 2008 Server Management functionality.

• First Look: Getting Started with Server Virtualization in Windows Server 2008 (Beta 3): Instructor-Led
  

  Summary: This 90 minute clinic provides in-depth knowledge of Windows Server virtualization scenarios, the features that support the scenarios, and a high-level overview of the Windows Virtualization architecture.

• First Look: Getting Started with Server Management in Windows Server 2008 (Beta 3) Hands-On Lab: Instructor-Led
  

  Summary: Note: This is a companion lab for First Look Clinic 6408A: First Look: Getting Started with Server Management in Windows Server 2008 (Beta 3).

• First Look: Getting Started with Server Virtualization in Windows Server Code Name 2008 Hands-On Lab: Instructor-Led
  

  Summary: This 90 minute lab provides an overview of Windows Server virtualization scenarios, the features that support the scenarios, and a high-level overview of the Windows Virtualization architecture.

• First Look: Getting Started with Branch Office Management in Windows Server 2008 (Beta 3): Instructor-Led
  

  Summary: This 90 minute clinic provides in-depth knowledge on the following Windows Server 2008 Branch Office functionality:

• First Look: Getting Started with Branch Office Management in Windows Server 2008 (Beta 3) Hands-On Lab: Instructor-Led
  

  Summary: Note: This is a companion lab for First Look Clinic 6402A: First Look: Getting Started with Branch Office Management in Windows Server 2008 (Beta 3).

• First Look: Getting Started with Security and Policy Control in Windows Server 2008 (Beta 3): Instructor-Led
  

  Summary: This 90 minute clinic provides in-depth knowledge on the following security and policy enforcement functionality in Windows Server 2008.

• First Look: Getting Started with Security and Policy Control in Windows Server 2008 (Beta 3) Hands-On Lab: Instructor-Led
  

  Summary: Note: This is a companion lab for First Look Clinic 6406A: First Look: Getting Started with Security and Policy Control in Windows Server 2008 (Beta 3).