Need some help please. We are flattening our Active Directory structure and right now some groups and OUs are delegated with domain groups for delegated ability to write members but were going to move all groups into a single OU and I need to find a way to delegate these domain groups to have the ability to continue to manage those groups but not others. For example if I have 100 domain groups and I need to delegate helpdesk ability to manage 40 of them but operations to manage the other 60 how to write that script? Obviously I am talking about a heck of a lot more than 10 groups and if it were that easy I would manually delegate each of them but I am talking about thousands. The Managedby tab is nice and all but I need additional groups to have access to them all. I know how to delegate a single domain group to have the ability to write members for all groups in a OU without an issue but once I fold all of the other OU’s into this single one those other delegations will go away.
Jeremy Stump | System Admin III | Information Technology
| BMHCC - CORPORATE
Phone: (901) 227-8205 | Jeremy.Stump@xxxxxxxxxxxxxxxx
Opinions expressed above are not necessarily those of Baptist.
This message and any files transmitted with it may contain legally privileged, confidential, or proprietary information. If you are not the intended recipient of this message, you are not permitted to use, copy, or forward it, in whole or in part without the express consent of the sender. Please notify the sender of the error by reply email, disregard the foregoing messages, and delete it immediately.
P Please consider the environment before printing this email...