Jean-Pierre Paradis's Blog: Using Scripts to Delegate Control of Active Directory

When one of the Scripting Guys was a system administrator, he spent a large portion of his time working on "empowering users" (which was really just a polite way of saying that he spent a large portion of his time trying to figure out how users could administer themselves, giving him more time to play Doom). As the IT world becomes bigger and more complex, the idea of sharing the administrative burden becomes more enticing. For example, wouldn't it be great if you could give a user the ability to update certain attributes in Active Directory, but without making that user a full-fledged domain administrator? Boy, do we have good news for you ....

Read all about it at Microsoft Script Center