{"id":1090,"date":"2010-10-01T11:49:09","date_gmt":"2010-10-01T14:49:09","guid":{"rendered":"http:\/\/www.radians.com.ar\/blog\/?p=1090"},"modified":"2010-10-01T11:49:09","modified_gmt":"2010-10-01T14:49:09","slug":"como-realizar-una-delegacion-de-permisos-en-nuestro-active-directory-para-que-nuestro-grupo-de-soporte-pueda-trabajar-sin-ser-administradores-de-dominio-howto","status":"publish","type":"post","link":"https:\/\/www.radians.com.ar\/blog\/?p=1090","title":{"rendered":"Como realizar una delegacion de permisos en nuestro Active Directory; para que nuestro grupo de Soporte pueda trabajar sin ser Administradores de Dominio {HOWTO}"},"content":{"rendered":"<p><a href=\"http:\/\/www.radians.com.ar\/Articulos\/Images\/fc49512a8511_A159\/delegateicon.gif\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-right-width: 0px; margin: 5px; padding-left: 0px; padding-right: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px\" title=\"delegate-icon\" border=\"0\" alt=\"delegate-icon\" align=\"left\" src=\"http:\/\/www.radians.com.ar\/Articulos\/Images\/fc49512a8511_A159\/delegateicon_thumb.gif\" width=\"90\" height=\"115\" \/><\/a>Ya he estado hablando de que es la delegaci\u00f3n de Permisos y porque deber\u00edamos utilizarla. Ahora veremos como aplicar o mejor dicho como hacerlo. Para ello cuento con un Windows 2003 Server R2 conformando un dominio <strong><em><font color=\"#ffc000\">radianslabs.com<\/font><\/em><\/strong>, que a su vez tienen implementado un <strong><em>Exchange Server 2007.<\/em><\/strong><\/p>\n<p>Tambi\u00e9n poseo una OU llamada<strong><em> <font color=\"#ffc000\">Rights Admins<\/font><\/em><\/strong>, que contiene un grupo llamado<strong><em> <font color=\"#ffc000\">GSG_Rights_Admins<\/font><\/em><\/strong> y todos los usuarios que pertenecen a dicha OU y a su grupo. En este grupo est\u00e1n todos los chicos de soporte t\u00e9cnico que tienen como funci\u00f3n atender los casos de soporte interno, y para lo cual deben tener permisos para desbloquear las passwords y poder cambiarlas.<\/p>\n<p>Dicho permiso es el que le vamos a delegar, para ello debemos hacer lo siguiente:<strong><\/strong><\/p>\n<p>1.Abrimos la consola <strong><em><font color=\"#ffc000\">Users and Computers<\/font> (dsa.msc)<\/em><\/strong>, seleccionamos la OU <strong><em><font color=\"#ffc000\">Rights Admins<\/font><\/em><\/strong><\/p>\n<p>2. Hacemos un clic con el bot\u00f3n derecho y seleccionamos <strong><em><font color=\"#ffc000\">Delegate Control<\/font><\/em><\/strong>.<\/p>\n<p>3. Aparecer\u00e1 un Wizard, en el cual hacemos un clic en <em><strong><font color=\"#ffc000\">Next<\/font><\/strong><\/em>.<a href=\"file:\/\/\/C:\\Users\\Administrator\\AppData\\Roaming\\Windows%20Live%20Writer\\PostSupportingFiles\\693f82ad-ef0d-43ec-a093-81b53fcb7f90\\del_025.jpg\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-right-width: 0px; margin: 5px auto; padding-left: 0px; padding-right: 0px; display: block; float: none; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px\" border=\"0\" alt=\"del_02\" src=\"http:\/\/www.radians.com.ar\/Articulos\/Images\/test_AFB5\/clip_image001.jpg\" width=\"440\" height=\"332\" \/><\/a><\/p>\n<p>4. Seleccionamos el grupo <em><strong><font color=\"#ffc000\">GSG_Right_Admins<\/font><\/strong><\/em> hacemos un clic en <em><strong><font color=\"#ffc000\">OK<\/font><\/strong><\/em>, y en <em><strong><font color=\"#ffc000\">Next<\/font><\/strong><\/em>.&#160; <\/p>\n<p><a href=\"file:\/\/\/C:\\Users\\Administrator\\AppData\\Roaming\\Windows%20Live%20Writer\\PostSupportingFiles\\693f82ad-ef0d-43ec-a093-81b53fcb7f90\\del_035.jpg\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-right-width: 0px; margin: 5px auto; padding-left: 0px; padding-right: 0px; display: block; float: none; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px\" border=\"0\" alt=\"del_03\" src=\"http:\/\/www.radians.com.ar\/Articulos\/Images\/test_AFB5\/clip_image002.jpg\" width=\"440\" height=\"332\" \/><\/a><\/p>\n<p>5. Seleccionamos <em><strong><font color=\"#ffc000\">Delegate the following common tasks<\/font><\/strong><\/em>, dentro de ah\u00ed seleccionamos<em><strong> <font color=\"#ffc000\">Reset<\/font> <font color=\"#ffc000\">user password and force password change at next logon<\/font><\/strong><\/em>, y hacemos un clic en <em><strong><font color=\"#ffc000\">Next<\/font><\/strong><\/em>. Notemos que si queremos podemos generar nuestra propia configuraci\u00f3n si seleccionamos <em><strong><font color=\"#ffc000\">Create a custom task to delegate<\/font><\/strong><\/em>.<\/p>\n<p><a href=\"file:\/\/\/C:\\Users\\Administrator\\AppData\\Roaming\\Windows%20Live%20Writer\\PostSupportingFiles\\693f82ad-ef0d-43ec-a093-81b53fcb7f90\\del_042.jpg\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-right-width: 0px; margin: 5px auto; padding-left: 0px; padding-right: 0px; display: block; float: none; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px\" border=\"0\" alt=\"del_04\" src=\"http:\/\/www.radians.com.ar\/Articulos\/Images\/test_AFB5\/clip_image003.jpg\" width=\"440\" height=\"334\" \/><\/a><\/p>\n<p>6. Hacemos un clic en <em><strong><font color=\"#ffc000\">Finish<\/font><\/strong><\/em> y listo. <\/p>\n<p><a href=\"file:\/\/\/C:\\Users\\Administrator\\AppData\\Roaming\\Windows%20Live%20Writer\\PostSupportingFiles\\693f82ad-ef0d-43ec-a093-81b53fcb7f90\\del_052.jpg\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-right-width: 0px; margin: 5px auto; padding-left: 0px; padding-right: 0px; display: block; float: none; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px; padding-top: 0px\" border=\"0\" alt=\"del_05\" src=\"http:\/\/www.radians.com.ar\/Articulos\/Images\/test_AFB5\/clip_image004.jpg\" width=\"440\" height=\"334\" \/><\/a><\/p>\n<p>Espero que les sea de utilidad. Saludos, Roberto Di\u2019Lello.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ya he estado hablando de que es la delegaci\u00f3n de Permisos y porque deber\u00edamos utilizarla&#8230;.<\/p>\n","protected":false},"author":1,"featured_media":4291,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[12,11],"tags":[],"class_list":["post-1090","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-2003-r2","category-2008-r2"],"_links":{"self":[{"href":"https:\/\/www.radians.com.ar\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1090","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.radians.com.ar\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.radians.com.ar\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.radians.com.ar\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.radians.com.ar\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1090"}],"version-history":[{"count":0,"href":"https:\/\/www.radians.com.ar\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1090\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.radians.com.ar\/blog\/index.php?rest_route=\/wp\/v2\/media\/4291"}],"wp:attachment":[{"href":"https:\/\/www.radians.com.ar\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1090"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.radians.com.ar\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1090"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.radians.com.ar\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1090"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}