Delegation of control - modify?

  • Thread starter Thread starter Justin Rich
  • Start date Start date
J

Justin Rich

I want to allow a person to not only create and delete OU's, Computers, and
etc but i want them to be able to modify them as well. is this even
possible?

I went playing around with the ACL stuff but it only lists create and delete
access. am i missing something?

thanks
Justin
 
Yes you are probably missing something. If you are looking at the GUI,
you probably are focused on an OU or container or something like that
and are looking at the general delegation instead of advanced delegation
or if in advanced delegation have the scope (apply onto) set to this
object or maybe this object and all subobjects when in fact you need to
change the scope to the object type you want to give modification rights
to.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm
 
Back
Top