Windows Server

Parhez Sattar · Guest

Is there any way to delegate the authority to update the User Account
Information (various attributes such as Name, Address, etc., but not
everything) to a regular user in AD? We are wanting one of the
administrative assistants to keep the user basic information, such as name,
department, address, etc. information up to date on AD so we can start using
that as our company directory, rather than maintaining a separate database.
But we don't want to give them access to reseting passwords, changing other
user account attributes, even within the same OU. If AD doesn't support it
natively, are there free/cheap tools that may work for us?

-Parhez Sattar

Paul Williams [MVP] · Guest

You can grant write access to the property set "Personal information".

A web-based front end is the best solution, in conjunction with delegating
these permissions. Although DSA.MSC from the workstation will be fine if
you don't have the time, inclination or expertise to write the app.
Although there are free ones available. Ulf has an example on his website
www.windowsserverfaq.org

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net

Parhez Sattar · Guest

Thanks Paul for your response. I couldn't find the example on Ulf's website,
nor can I find any free tools online, via Google or MSN. I must not be using
the right set of keywords. Any insight? Thanks again.

-Parhez Sattar

"Paul Williams [MVP]" wrote:

Paul Williams [MVP] · Guest

Here's Ulf's ASP phone book example:
-- http://www.windowsserverfaq.org/?url=/faq.asp

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net

	Windows Server Forum Index -> Active Directory	All times are GMT
Page 1 of 1