Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Active Directory Delegation for Address and Telephone numbers

Posted on 2007-08-02
Medium Priority
Last Modified: 2012-05-05
Im looking to give somebody in admin the ability to maintain users' address information and telephone numbers in the windows 2000 active directory.  Nothing else.  How do I do this?
Question by:loveboatexpress
  • 2
  • 2
LVL 38

Expert Comment

ID: 19621049
1. Run Active Directory Users and Computers.
2. Right-click the container holding the users (or the domain name if you want to delegate all) and hit Delegate Control.
3. Welcome Screen - hit Next.
4. Users or Groups screen - click Add and select the person or group to delegate this control to.  Click Next.
5. Tasks to Delegate screen - select "Create a custom task to delegate". Click Next.
6. Active Directory Object Type screen - Select "Only the following objects in the folder:".  Check "User objects". Click Next.
7. Permissions screen - uncheck "General" and check "Property-specific". Check the boxes corresponding to the specific fields you would like the user or group to be able to edit.  Click Next.
8. Completing screen - click Finish.

Author Comment

ID: 19623021
Thanks for the response.  I got as far as step 7 before requesting help.  

You say:

7. Permissions screen - uncheck "General" and check "Property-specific". Check the boxes corresponding to the specific fields you would like the user or group to be able to edit.  Click Next.

This is where the cryptic names mean absolutely nothing to me.  This is specifically where I need help.
LVL 38

Accepted Solution

Shift-3 earned 1500 total points
ID: 19627052
Well, after more testing it appears that there isn't a way to delegate the "City", "State/province", and "Country/region" fields specifically.

Instead, uncheck "Property-specific", check "General", and then check "Read and write Personal Information".

Author Comment

ID: 19640964
Must my admin user use Active Directory Users and Computers or Windows Search to change this info, or can she use the Address Book within Outlook?

Featured Post

Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

581 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question