Foreign Security Principals Permissions

For Foreign Security Principals (FSP) to be aggregated, created, or modified a single service account must have full delegated permissions on the FSP container. Use the Delegation Control Wizard to delegate permissions to the service Account.

To delegate permissions using the Delegation Control Wizard, complete the following:

1. Open Active Directory Users and Computers.

2. Right-click on the ForeignSecurityPrincipals container, select Delegate Control, and then select Next.

3. Select the Add button to add a service account user and then select Next.

4. Select Create a custom task to delegate and then select Next.

5. Select This folder, existing objects in this folder and creation of objects in this folder.

6. On the next screen, select Full Control under Permissions, and then select Next.

7. Select Finish.