[howto] give write/modify access to some fields of the AD

  • Thread starter Thread starter Pierre Bru
  • Start date Start date
P

Pierre Bru

hi,

I would like to give write/modify access to some part of the AD (some
OU) to people in charge of departments, but I would not like to give
them full access to accounts, only to some fields (office number,
telephone, etc.).

is it possible to setup a console (or any other method) to do that ?

TIA,
Pierre.
 
Hi

You need to delegate control over the OU
Right click the OU and choose delegate control, then choose the especific
task(s) to delegate control of.

--
I hop that helps

Good Luck
Jorge Silva
MCSA
Systems Administrator
 
Right click the OU and select delegate control. That will start the wizard.
Select the user/group you want to delegate permissions to, select create
custom task, select only the following objects - user, make sure general and
property specific are selected, and then select the permissions you want to
delegate. You can also do the same thing by selecting properties,
security/advanced and then adding the users/group with the permissions you
want for user object under "apply onto" and selecting the properties tab. --
Steve
 
Back
Top