Delegating Security Group Maintenance

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

In large organizations, it is not possible for IT staff to be responsible for performing routine membership maintenance on large numbers of account groups, or to administer the ACLs and resource groups for resources in all departments. After a security group has been created and named, you can delegate the management of the group to other members or your organization. This can relieve the burden on your IT department.

Figure 15.6 shows the tasks for delegating security group maintenance.

Figure 15.6   Delegating Security Group Maintenance