Anilrgowda

I am very confused about the UI for OU delegataion.

I have a new windows 2003 server that I am farting around with.

Creating a new OU is easy enough.

After that I am configuring it.

When I create OU under my domain, I suppose that OU only pertains to my domain (true / false)?

I am right clicking and selecting Delegate conrol.

I guess this is where specify WHO BELONGS TO MY OU (True or False) or WHO IS ALLOWED TO PERFORM THE ADMIN TASKS SPECIFIED ON THE SUBSEQUENT FORM(True or False) or both...
Why doesn't it let me pick another OU, I thought OU perms can be embedded?

Once delegation is completed (Right click on group, then delegate control), where do I go to see the properties of the operation that was just completed? (When I right click on the OU and click properties, that doesn't do the trick; I don't see the rights I specified and the people I delegated to do the tasks).

Sometimes, you just want the "Who to delegate" be responsible for certain tasks, BUT ONLY FOR CERTAIN GROUPS. Where and how is that specified.

Anilrgowda

An Ou is a container unit for grouping purposes and group policy. It cannot be used to assign security. Groups are used for security.
The delegation wizard is simply configuring security on that OU.

i.e. Delegating Password reset will give allow pwdLastSet on user objects.

You want to see the setting select view\advanced features inside Active Directory Users and Computers.

Then right click on an OU and select security. You will most likely have to select advanced to see what was changed.

There a lot of setting and combinations. Hence the wizard, to help out.