Hello, My company has 5 location in different Cities, the main Domain controller is running in Mumbai location and rest of the locations have ADC. I had made Organizational Unit Location wise. I want to give administrator permissions Organizational Unit wise, i want that my one location user does not have permission to access the Organizational Unit of another location. So please tell me how to do this things. ThanksWith warm regards, Kiran Sawant

Hi, I think you may use “Delegate Control” feature to delegate and restrict the permissions. To use it, you just need to right click on OU in ADUC and select Delegate Control. For the detailed information, please refer to the following Microsoft TechNet article: Delegate Control of an Organizational Unit http://technet.microsoft.com/en-us/library/cc732524.aspx Regards, Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Thanks sir for your valuable reply. I have followed your instruction and I had given delegate permission to one of location user, this user has no administrator rights yet and this user don't access Active directory Users and computers. Whenever i login through test user ( Test User has Delegate Access) and click on Active Directory Users and Computer then they will ask for password authentication and when i enter the test user's password, it will not accept it.