DelegationNotes

DelegationNotes

Delegation is a good reason why you might choose to adopt a single-domain model with multiple OUs instead of the more complex multiple-domain model. You can delegate authority over domains as well, but there are fewer administrative groups to manage with only one domain.

After you delegate authority over an object, it may take several minutes until the users or groups can perform the tasks delegated to them while Active Directory replicates the change across the network.

Delegation of authority over Group Policy Objects (GPOs) is different from delegation of authority over containers. See Group Policy in this chapter for more information.

You can't delegate control over the Builtin folder.

See Also