I am using a Windows 2008 Active Directory. I want to delegate control of the Australia OU to the AUIT security group and for those permissions to apply to all OUs under New York. I only want to get rid of the ability to make users. They can reset and change passwords, edit account information, disable and enable accounts. But whatever settings I use, the members are not able to reset passwords or enable accounts. Can anyone tell me whats the best way to do this? Thanks.
Bookmarks