Announcement

Collapse
No announcement yet.

Active Directory user information

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Active Directory user information

    Hi,

    I would like to have a few people who can enter user information in to the user accounts in Active Directory such as Telephone number, Department etc... I would like to do this without giving them access to view or change anything else.

    The DC is Windows 2003. Please let me know if you need any more inforamtion to answer.

    What is the best way to go about this.

    Thanks.

  • #2
    Re: Active Directory user information

    Check here for some MS info. Basically what you want to do is run the Delegation of Control wizard and choose "Create a Custom Task to Delegate", Choose "Only the following objects in the folder" option with "user objects" specified and then you can choose objects and permissions on the next page. Make sure you choose Property-specific.
    BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
    sigpic
    Cruachan's Blog

    Comment


    • #3
      Re: Active Directory user information

      Thanks for your reply, am I right in saying that I would need to install the adminpak on the users machines who will be updating this information. I just want to get this right as I wouldn't want anyone to have access to do anything potentially damaging.

      Thanks again.

      Comment


      • #4
        Re: Active Directory user information

        If the users are doing it directly from their machines then yes, they will need either the Admin Pack or RSAT depending on client OS version. They will require the Active Directory Users and Computers snap-in.
        BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
        sigpic
        Cruachan's Blog

        Comment


        • #5
          Re: Active Directory user information

          Hi,
          Taskpad view will be useful for this task.

          Open MMC,
          Add ADUC (Active Directory users and computers)
          Now, Right click on the ADUC
          Select New TaskPad View.
          Then configure the windows as you need

          Thanks
          -PREM

          Comment


          • #6
            Re: Active Directory user information

            Thanks for ll the help, one other question.

            Once you have delegated control to someone, how do you remove the rights you have given them?

            Thanks

            Comment


            • #7
              Re: Active Directory user information

              Hi,
              In ADUC, Click view -> Advanced Features.
              Now, Right click OU -> Properties -> Security Tab
              I that you can view, modify or delete the permissons of the delegated user or group.

              Thanks
              -PREM

              Comment

              Working...
              X