In order to allow test migrations from out NT4 world to 2003 AD, we currently have many regional and departmental admins as Domain Admins in or test 2003 AD so we can migrate and utilise sIDHistory. I would prefer it if we could remove them incase of "accidents" (it is a proof of concept AD but is fundamental to the project and has a number of pilot users doing application testing)
Having read KBs 322970 and 326480 I have found reference to "delegating the extended right to migrate sIDHistory" but have no idea how to actually delegate this as I can't see it as a user right or a permission - apart from the permission on user objects "All Extended User Rights".
Any help gratefully received!
Stephen Wilkinson
Tel +44(0)207 4759276
Mobile +44(0)7973 143970
E-Mail: [EMAIL PROTECTED]
----------------------------------------------------------------------
If you have received this e-mail in error or wish to read our e-mail
disclaimer statement and monitoring policy, please refer to
http://www.drkw.com/disc/email/ or contact the sender.
----------------------------------------------------------------------
