Delegate the Allowed to Authenticate Extended Right for an Entire OU
Demonstration script that grants fabrikam\kmyer the Authenticate As extended right. Kmyer will be granted this right for all users in the Finance OU in Active Directory.
What is the purpose of this script? After you modify Allowed to Authenticate attribute, the fabrikam\kmyer user can login “on the behalf” of all users in Finance OU?