Ask the Expert

How do I "undelegate" a user group in AD?

In our Active Domain we have delegated a security group to have the right to add computers to another OU. How do I "undelegate" that user group if the need arises?

We thought it would be better to place the users in the group, and delegate the group with the thought that it would be easier to change group membership than to manage individual users.

Requires Free Membership to View

You are correct -- it's best to have functions and responsibilities assigned through group memberships rather than simply on a user-by-user basis. Un-delegating a responsibility from a group is as simple as deleting their privilege for that action from the Active Directory policy manager.

This was first published in May 2004

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: