Delegating Control Of Rsop

By Author: fiona
Total Articles: 191
Comment this article

Permission for generating an RSoP query is set for the domain or mcse 2008 exam OU by selecting one of the Generate Resultant Set Of Policy Planning options in the Delegation Of Authority Wizard. You must be a member of the Enterprise Administrators group to delegate RSoP control at the domain and site level.

Delegated control is inherited by all child containers below the container to which control is delegated.
To delegate control of RSoP, complete the following steps:
1.Click Start, point to Administrative Tools, then click Active Directory Users And Computers.
2.In the console tree, right-click the domain or OU for which you want to delegate control of RSoP, and then click Delegate Control.
3.On the Welcome To The Delegation Of Control Wizard page, click Next.
4.On the Users Or Groups page, click Add.
5.In the Select Users, Computers, Or mcitp 2008 Groups dialog box, type the user or group for which you want to delegate administration in the Enter The Object Names To
Select box, and then click ...
... OK. Click Next on the Users Or Groups page.
6.On the Tasks To Delegate page, click Delegate The Following Common Tasks and select the Generate Resultant Set Of Policy (Logging) check box or the Generate Resultant Set Of Policy (Planning) check box, or both, and then click Next.
On the Completing The Delegation Of Control Wizard page, review your selections. Click Finish.
Windows Server 2003 or Windows 2000 new installation (no previous operating system) Windows Server 2003 or Windows 2000 upgrade of Microsoft Windows Me, Microsoft Windows 95, or Microsoft Windows 98 with user profiles disabled
Windows Server 2003 or Windows 2000 upgrade of Windows NT 4 or Windows NT 3.51 Windows Server 2003 or Windows 2000 upgrade of Windows Me, Windows 95, or Windows 98 with user profiles enabled.
Use the Redirect To The User's Home Folder option only if you have already deployed home directories in your organization. This option is intended only for organizations that want to maintain compatibility with their existing 70-685 home directory environment.