Active directory Delegation

good day , 

i facing issue when  i`m try delegate permission disk team able create users in specific ou ,

permission working notice permission being applied more need disk team now 

can modify permissions security tab . may lead security risk , need deny .

so have solution disable changing in permission , make security tab  greyed out. 

thanks, 

hi,

based on test, if delegate common domain user create, delete, , manage user accounts permission, cannot manage security tab.

in opinion, in case, account may have permission modify acl security tab before delegate create, delete, , manage user accounts permission.

if delegate common domain user create, delete, , manage user accounts permission, see permission below user has.

best regards,

jay

---

please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com.

Windows Server  >  Management