user attributes

  • Thread starter Thread starter Pat
  • Start date Start date
P

Pat

I'm running W2k with AD. how would I modify a user's attributes using
the group properties they are in to only let them go into AD and
change certain properties of users, say for example all users phone
numbers and nothing else.
 
You would have to modify the permisisons on the objects that you want those
users or groups to access. For example if you want james to be able to
modify the phone number for john, you would open AD users & computers,
highlight john, right click and select preoprties. Click the security tab,
click advanced, click add and add james. Click the properties tab and check
allow for "write phone number". Click ok three times to close the boxes.

--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
can I do the same with a global group. say put james in a global group
called change phone number and change the properties on the group?
 
in the group polices I'm changing, when I'm at the permission entry
screen and I want to apply certain properties to an object. How can i
tell which property belongs to , say the phone field in the users
properties to allow a user to enter that on all other users?
 
in the group polices I'm changing, when I'm at the permission entry
screen and I want to apply certain properties to an object. How can i
tell which property belongs to , say the phone field in the users
properties to allow a user to enter that on all other users?
 
Back
Top