Would you like to learn how to delegate permission to create groups in the Active Directory? In this tutorial, we are going to show you how to allow a group to create groups on the Active Directory.
• Windows 2012 R2
• Windows 2016
• Windows 2019
• Windows 10
• Windows 7
Equipment list
The following section presents the list of equipment used to create this tutorial.
As an Amazon Associate, I earn from qualifying purchases.
Windows Related Tutorial:
On this page, we offer quick access to a list of tutorials related to Windows.
Tutorial Windows – Delegate permission to create groups
Open the application named: Active Directory Users and Computers.
![Active Directory – Users and Computers Active Directory - Users and Computers](https://d1ny9casiyy5u5.cloudfront.net/wp-content/uploads/2021/07/Active-Directory-Users-and-Computers.webp)
Create a new group.
![Active Directory – Create a group Active Directory - Create a group](https://d1ny9casiyy5u5.cloudfront.net/wp-content/uploads/2021/07/Active-Directory-Create-a-group.webp)
Right-click on the desired organizational unit.
Select the option to Delegate Control.
![Active Directory – Delegate Control Active Directory - Delegate Control](https://d1ny9casiyy5u5.cloudfront.net/wp-content/uploads/2021/07/Active-Directory-Delegate-Control.webp)
Select the desired group.
![Active Directory – Delegate Permissions Active Directory - Delegate Permissions](https://d1ny9casiyy5u5.cloudfront.net/wp-content/uploads/2021/07/Active-Directory-Delegate-Permissions.webp)
Select the permission to create, delete, and manage groups.
![AD – Delegate permission to create groups AD - Delegate permission to create groups](https://d1ny9casiyy5u5.cloudfront.net/wp-content/uploads/2021/07/AD-Delegate-permission-to-create-groups.webp)
Click on the Next button to finish the configuration.
In our example, members of the group named MY-ADMINS will be able to create and manage groups inside the organizational unit named TEST.
![Active Directory – Permission to create groups Active Directory - Permission to create groups](https://d1ny9casiyy5u5.cloudfront.net/wp-content/uploads/2021/07/Active-Directory-Permission-to-create-groups.webp)
You will be able to add members to groups created in this organizational unit.
![Active Directory – Delegate group maangement Active Directory - Delegate group maangement](https://d1ny9casiyy5u5.cloudfront.net/wp-content/uploads/2021/07/Active-Directory-Delegate-group-maangement.webp)
You will not be able to manage groups in other organizational units.
![AD – Delegate Permission to create groups AD - Delegate Permission to create groups](https://d1ny9casiyy5u5.cloudfront.net/wp-content/uploads/2021/07/AD-Delegate-Permission-to-create-groups-1.webp)
You will not be able to create groups in other organizational units.
![Delegation – Cannot create user account Delegation - Cannot create user account](https://d1ny9casiyy5u5.cloudfront.net/wp-content/uploads/2021/07/Delegation-Cannot-create-user-account.webp)
Congratulations! You are able to delegate permission to create groups in the Active Directory.