Additional Information
Microsoft Official Curriculum, course 1561: Designing Microsoft Windows 2000 Directory Services Infrastructure (http://www.microsoft.com/traincert/syllabi/1561bfinal.asp)
Best Practice Active Directory Design for Managing Windows Networks (http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/bpaddsgn.asp)
Windows 2000 Domain Architecture: Design Alternatives (http://www.microsoft.com/technet/prodtechnol/ad/windows2000/plan/w2kdomar.asp)
Design Considerations for Delegation of Administration in Active Directory (http://www.microsoft.com/technet/prodtechnol/ad/windows2000/plan/addeladm.asp)
315676: How to Delegate Administrative Authority in Windows 2000
221577: How to Delegate Authority for Editing a Group Policy Object (GPO)
235531: Default Security Concerns in Active Directory Delegation
279723: How to Grant Help Desk Personnel the Specific Right to Unlock Locked User Accounts
301191: How to Integrate DNS with Existing DNS Infrastructure If Active Directory Is Enabled in Windows 2000
274438: Cannot Use Kerberos Trust Relationships Between Two Forests in Windows 2000
253831: Remote Administration of Terminal Services by Non-Administrators Accounts
The seven articles above can be accessed through the Microsoft Knowledge Base. Go to http://support.microsoft.com and enter the article number in the Search The Knowledge Base text box.