

Delegate to newbies with taskpads
Kevin Sharp
In the real world a lot of network management gets done by people who don't consider themselves network managers and have no real interest becoming one. Department receptionists are expected to add new users. The HR department wants its own person managing department shares. The CFO wants to hold her administrative assistant personally responsible for conducting accounting backups and periodically storing the backup media offsite.
Group policies let you delegate the requested authority while restricting the recipient from being able to perform tasks outside their purview. You can let the CFO's assistant run backups on the accounting servers but not the human resource servers. You can allow a receptionist to add and remove users while controlling the authority that those new users can be granted.
Group policies cannot help you overcome the inexperience of the people to whom you are asked to delegate responsibility. Using the typical management GUI, some simple tasks may require a user to navigate three or four graphical trees and remember multiple context-sensitive menu manipulations. That means the receptionist may be responsible for adding the user, but you're still responsible for answering the phone every time the receptionist can't remember how.
Microsoft Management Console (MMC) lets you create and distribute simple user interfaces customized to include icons for only those tasks a particular user needs to perform.
Technique:
For more on MMC, check out: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/mmc/mmcstart_1dph.asp
Kevin Sharp is a registered professional engineer, writer, and yoga teacher living in Tucson, Arizona. His writing interests have produced books and articles on the economic impact of technology on manufacturing and distribution organizations.