Domain administration tasks
l User management
n delegated to group administrators and „user service“
n set passwords, create, move, delete, archive,...
l Group management
n define composition
l System management
n query computers for special properties
n license management
ŕ different group are taking part of this processes
ŕ But: most jobs can be done only with domain admin privileges
ŕ Need a server, that holds scripts, controls security and executes