Delegate control in Active Directory
Posted on 2003-11-03
I want to delegate control to a group of users so they can change the "Notes" field in the "Telephones" tab in a users properties sheet in Active Directory.
I was able to delegate control of other tasks but I can't find anything regarding allowing my group to write the "note" field.
The property "note" is shown in ADSIEdit as "info".
I have an application I wrote that makes the change to objUser.info. It works fine from the admin account but for the group of delegated users it fails when it tries writing the change with the line: objUser.setInfo, right after changing the info field.
This is how the code looks:
objUser.info = "User was Un-Blocked"
Does anyone know anything extra about delegating control of AD objects ?