Solved

Enable a user to only change certain items in AD

Posted on 2001-06-13
4
130 Views
Last Modified: 2010-04-13
We are running Win 2k server w/ Exchange 2k.  I need to enable the HR Mgr to edit personal info in the properties of each user so that it shows up in the Global Address List.  Is there a way to allow the HR Mgr to edit info in certain tabs of the users properties?  I would prefer not to give this person Account Operator permissions.  An example is this:

I create a new user named Jane Doe.  The HR Mgr now needs to enter Jane's info for address, telephones, organization in the corresponding tabs in AD Users.  The HR Mgr should not be able to edit any other tabs.

Thanks.
0
Comment
Question by:robinsonbpc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 32

Accepted Solution

by:
jhance earned 200 total points
ID: 6186211
That's a tricky problem.  I don't think you can selectively limit certain fields in the User Manager.  It an all or nothing proposition.  (Of course if there _is_ a way, I'm sure someone will point it out....)

I've seen this approached, however, using the following technique.  You need to use a SERVICE (and you probably need to either write one or get someone to write one) so that you have an application that runs with sufficient privilege on the machine to make the changes to the user account database.  The service either talks to the account management functions directly or uses one of the command line utils that modify user accounts to update the accounts.  Then you provide a user interface program that your HR guy can run that talks to the service.  The service only accepts certain requests from the user interface and so it only permits allowed operations.

It's a bit of work but I think this is the best way to accomplish this.
0
 
LVL 5

Expert Comment

by:cempasha
ID: 7858897
Dear questionner/expert(s)

No comment has been added lately, so it's time to clean up this TA.
I'll leave a recommendation in the Cleanup topic area that this question is to be:

- PAQ'd and pts removed

Please leave any comments here within the next seven days.

==> PLEASE DO NOT ACCEPT THIS COMMENT AS AN ANSWER ! <==

PaSHa

Cleanup volunteer
0
 
LVL 32

Expert Comment

by:jhance
ID: 7863475
I disagree.  My comment is a valid solution here and should be FORCE ACCEPTED.
0
 

Expert Comment

by:SpideyMod
ID: 7924289
Answered by jhance

SpideyMod
Community Support Moderator @Experts Exchange
0

Featured Post

[Webinar] Code, Load, and Grow

Managing multiple websites, servers, applications, and security on a daily basis? Join us for a webinar on May 25th to learn how to simplify administration and management of virtual hosts for IT admins, create a secure environment, and deploy code more effectively and frequently.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Recreate New ADC 1 295
Closing cmd window after script execution 4 473
Windows 2012 R2 DC compatibility Windows 2000 Servers and Windows XP 9 720
windows 2000 image 3 152
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Dramatic changes are revolutionizing how we build and use technology. Every company is automating, digitizing, and modernizing operations. We need a better, more connected way to work together as teams so we can harness the insights from our system…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question