non-admins modifying AD user accounts

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I'm trying to find a way to allow a member of our Human
Resources group to modify user account data (phone
numbers, address, office location, etc.) in AD, but I
don't want them to be able to do anything else like delete
entire OUs or something worse. any suggestions?
 
On ou, that holds user accounts rightclick on ou and select delegate
control. Thi gives you the ability to delegate some administrative tasks to
some non admin users.

--

Regards
Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
(e-mail address removed), (e-mail address removed)
 
Back
Top