How do I delegate the ability to synchronize BDC's in Directory and Resource Administrator? (NETIQKB33180)

goal
How do I delegate the ability to synchronize BDC's in Directory and Resource Administrator?

fact
Directory and Resource Administrator 6.x

fact
Directory and Resource Administrator 7.x

fix

To delegate the ability to synchronize BDC's in an NT domain using Directory and Resource Administrator (DRA), please perform the following steps:

In DRA 6.x versions:

1. Launch the 'MMC 'interface while logged on as an Assistant Admin with, at minimum, Built-in Security Role
2. Expand "ActiveView management" node
3. Highlight ActiveViews and click New
4. Type in a name for the ActiveView and click Finish
5. Select Custom rule, in the Add Objects dialog box and click Next
6. Select the Include option and click Next
7. Highlight Computers and click Next
8. Define the scope of the BDC's (you may specify the Include Domain Controllers with name matching option) and click Next
9. Click Finish
10. Click Assign Assistant Admins, in the "What would you like to do next?" dialog box
11. Click Add users, select the Assistant Admin account, and click Add
12. Click OK | Next
13. Click Add Powers
14. Expand the Computers node
15. Highlight the power Synchronize Domain Controllers and select Add
16. Select Next and Finish

In DRA 7.x versions:

1. Launch the Delegation and Configuration console while logged on with the service account or as a DRA Administrator account
2. Expand the Delegation Management node and select ActiveViews
3. Click New ActiveView
4. Click Next
5. Click Add and select Objects that match a rule...
6. Select Computers
7. Define the scope of the BDC's (you may specify the Domain Controllers Matching Wildcard... option) and click OK
8. Click Next
9. Type in a name for the ActiveView and click Next
10. Click Finish
11. Click Next and Add
12. Select Users...
13. Type in the name of the Assistant Admin and click Find Now
14. Highlight the Assistant Admin and click Add, then OK
15. Click Next
16. Click Add and select Powers
17. Type in Synchronize Domain Controllers and click Find Now
18. Highlight the power and click Add, then OK
19. Click Next
20. Click Next again and then Finish

 

Formerly known as NETIQKB33180