Announcement

Collapse
No announcement yet.

Delegate permissions in AD to an account to update domain admins account attributes

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Delegate permissions in AD to an account to update domain admins account attributes

    Does anyone know if this is possible, I have tried to delegating different standard and custom permissions in AD and I cannot get the account to be able to update attributes of domain admin accounts. I believe this is by design but I just wanted to throw it out there just in case someone has gotten it to work. We have an automated process and want to use a non-domain admin account to update everyone in AD. Thanks.

  • #2
    AFAIK you can't delegate control over the protected groups.
    https://technet.microsoft.com/en-us/...minholder.aspx
    Regards,
    Jeremy

    Network Consultant/Engineer
    Baltimore - Washington area and beyond
    www.gma-cpa.com

    Comment

    Working...
    X