User attributes question

  • Thread starter Thread starter Philip Nunn
  • Start date Start date
P

Philip Nunn

If I want to enable a security group to be able to disable user accounts in
AD, what user object attribute do I need to allow the group to change so
they have permissions to disable users? thanks in advance!

Phil Nunn
 
They have to have write access to userAccountControl. Note that will give
additional capabilities. Do a google search for useraccountcontrol and
enumeration and look at flag enumeration of that attribute.

joe
 
Back
Top