I work for a very large organization and we are in the process of planning W2K migration from NT4.0. Our present domain structure has over a hundred domains due to politics as well as the need to have local admins have full power to administer their local domains. Once we move to Active directory we want to collapse the present domain and limit it just one or two but still give the local admin power over their OU but also able to do some functions on the local located domain controllers, likeapply service packs, install software etc. We don’t want to make them full domain admins. So is there a way to make the domain admins rights more granular.
