Would you like to learn how to delegate permission to create groups in the Active Directory? In this tutorial, we are going to show you how to allow a group to create groups on the Active Directory.

• Windows 2012 R2
• Windows 2016
• Windows 2019
• Windows 10
• Windows 7

Equipment list

The following section presents the list of equipment used to create this tutorial.

As an Amazon Associate, I earn from qualifying purchases.

Windows Related Tutorial:

On this page, we offer quick access to a list of tutorials related to Windows.

Tutorial Windows – Delegate permission to create groups

Open the application named: Active Directory Users and Computers.

Active Directory - Users and Computers

Create a new group.

Active Directory - Create a group

Right-click on the desired organizational unit.

Select the option to Delegate Control.

Active Directory - Delegate Control

Select the desired group.

Active Directory - Delegate Permissions

Select the permission to create, delete, and manage groups.

AD - Delegate permission to create groups

Click on the Next button to finish the configuration.

In our example, members of the group named MY-ADMINS will be able to create and manage groups inside the organizational unit named TEST.

Active Directory - Permission to create groups

You will be able to add members to groups created in this organizational unit.

Active Directory - Delegate group maangement

You will not be able to manage groups in other organizational units.

AD - Delegate Permission to create groups

You will not be able to create groups in other organizational units.

Delegation - Cannot create user account

Congratulations! You are able to delegate permission to create groups in the Active Directory.