We will be getting a new intern in a couple weeks and we would like to be able to allow her to make changes to AD objects (delete orphan computers/users, modify user account items like phones, emails and locations) without making her a domain admin. I noticed that we can delegate permissions to the Users or computers folder by going to view>advanced and then clicking on the specific folder. Is this the only way to give somoene the ability to make changes to Active Directory without making them a domain admin. We are using Exchange 2003

You should post this question in an appropriate Windows Server forum since this isn't an Exchange thing. -- Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." . "dkurz8814" wrote in message news:f3763cb9-f989-4d4e-8b44-4e1e72c27451... We will be getting a new intern in a couple weeks and we would like to be able to allow her to make changes to AD objects (delete orphan computers/users, modify user account items like phones, emails and locations) without making her a domain admin. I noticed that we can delegate permissions to the Users or computers folder by going to view>advanced and then clicking on the specific folder. Is this the only way to give somoene the ability to make changes to Active Directory without making them a domain admin. We are using Exchange 2003 Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."