Benefits of Delegation

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

By enabling efficient, security-conscious delegation and distribution of administrative responsibilities among various administrative groups that addresses the specific requirements imposed by participating business units, delegation of administration provides the means to successfully manage an Active Directory environment. Delegation of administration provides the following benefits:

  • Allows distribution of administrative responsibility among multiple administrative groups, each with a defined scope of authority and a defined set of responsibilities.

  • Enables decentralization of administrative authority.

  • Allows the security-conscious distribution of administrative responsibility.

In addition, delegation of administration allows organizations to efficiently manage their IT infrastructures and enforce their security precautions by enabling organizations to:

  • Distribute administrative responsibilities on the basis of least privilege, which ensures that the individual or group of individuals to whom the task has been delegated can perform only the tasks that are delegated, and cannot perform tasks that have not been explicitly delegated or authorized.

  • Increase administrative efficiency by easily and conveniently assigning the responsibilities for managing Active Directory content and the directory service itself.

  • Reduce administrative costs by facilitating shared administrative responsibility. For example, administrative responsibility for providing account support to all accounts in the organization can be easily achieved within a matter of minutes.