Hi

I've been tasked with investigating if AD could be used to replace an administration section of our product.

What we essentially need to do (in C# using .Net 2.0) would be too create org units that can manage themselves to a certain extent and control permissions of a web based system.

The level of permissions would need to be customisable to the extent of disallowing access to edit boxes and features on web pages that are dynamically generated e.g user A cannot access control B and C but can access control Z.

does anyione know if AD would be able to give us this flexibility ?

Thanks in advance