Chapter 9. Delegating the Administration of Active Directory Domain Services

In this chapter:
Active Directory Administration Tasks	326
Accessing Active Directory Objects	327
Active Directory Object Permissions	329
Delegating Administrative Tasks	345
Auditing the Use of Administrative Permissions	348
Tools for Delegated Administration	352
Planning for the Delegation of Administration	354
Summary	355
Additional Resources	356

Active Directory Domain Services (AD DS) is typically deployed as a common directory service shared between various business divisions within an organization. Using a common directory service helps reduce the costs associated with maintaining the infrastructure, but introduces a number of other considerations: