A. Its possible to delegate authority in Windows 2000 using a wizard which is simpler than manually delegating authority:

  1. Start the Active Directory Users and Computers MMC snap-in (Start – Programs – Administrative Tools – Active Directory Users and Computers)
  2. Right click on the container (domain/OU/built-in) and select ‘Delegate Control.’ from the context menu
  3. Click Next to the intro wizard
  4. Click Add to add users/groups that will have control delegated to them
  5. Select the users/groups and click Add. Click OK. Click Next once users/groups have been selected
  6. Select if all objects in the folder will be covered or only certain objects, e.g. select User objects only. Click Next
  7. Select the type of permissions, General will normally be OK. Select the type of Permissions, e.g. ‘Read and write Phone and Mail Options’. Click Next
  8. Click Finish to the wizard

Click here to view image