[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


Is there a way to let users enter there own information in Active Directory?

Posted on 2005-04-13
Medium Priority
Last Modified: 2013-12-04
I want users to be able to add there phone numbers,  address and other information themselves. Is there an easy way to do this without first installing AD tools on each client machine?  I dont want them to be able to do anymore than there own accounts..
Question by:sullend
LVL 12

Accepted Solution

Phil_Agcaoili earned 2000 total points
ID: 13776452
This is an interesting question.  I've never seen anyone open this up for their users, as there are security concerns in allowing an end-user to modify fields which are typically only meant for domain admins.

Maybe this will help:

Using Scripts to Manage Active Directory Security
Part 1: Extended Rights

Section 3 states that you can create an access control entry so that you can give a user the right to manage a single attribute (such as phone number) for a user or set of users.

Also, I read through this Blog and the comments are interesting:

A person on the Blog offered a great tip--Sharepoint.
I use Sharepoint and it is highly configurable for the end-user and integrated with AD2003 and Exchange2003.

You can import fields from each application to share information posted on Exchange or on Sharepoint.

I would go this route if I were you.

Author Comment

ID: 13782100
Thank you

Featured Post

New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
Suggested Courses
Course of the Month18 days, 22 hours left to enroll

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question