Recommended Approach to Service Management
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
As mentioned in Chapter 1: Delegation of Administration Overview earlier in this document, a structured and methodical approach to managing an Active Directory environment can greatly enhance the security of the directory service, reduce administrative costs involved in managing Active Directory, and successfully address the administrative needs of all stakeholders, thereby making Active Directory management more tractable seamless, efficient and secure.
A structured and methodical approach to managing the service aspects of an Active Directory environment generally involves the following recommended steps:
Understand all aspects of Active Directory service management.
Understand the administrative needs of all stakeholders.
Create a service management delegation model that ensures that administrative coverage is provided for all aspects of Active Directory management and that the administrative needs of all stakeholders are addressed.
Implement the service management delegation model in an efficient and security-conscious fashion, ensuring that the administrative needs of all delegated administrators and all stakeholders are addressed while also ensuring that all administrative access has been granted on the basis of least privilege.
Maintain the implemented delegation model, which involves making modifications to the implemented delegation model in response to changes in administrative requirements or needs.