Active Directory Delegation for Address and Telephone numbers

Posted on 2007-08-02
Last Modified: 2012-05-05
Im looking to give somebody in admin the ability to maintain users' address information and telephone numbers in the windows 2000 active directory.  Nothing else.  How do I do this?
Question by:loveboatexpress
    LVL 38

    Expert Comment

    1. Run Active Directory Users and Computers.
    2. Right-click the container holding the users (or the domain name if you want to delegate all) and hit Delegate Control.
    3. Welcome Screen - hit Next.
    4. Users or Groups screen - click Add and select the person or group to delegate this control to.  Click Next.
    5. Tasks to Delegate screen - select "Create a custom task to delegate". Click Next.
    6. Active Directory Object Type screen - Select "Only the following objects in the folder:".  Check "User objects". Click Next.
    7. Permissions screen - uncheck "General" and check "Property-specific". Check the boxes corresponding to the specific fields you would like the user or group to be able to edit.  Click Next.
    8. Completing screen - click Finish.

    Author Comment

    Thanks for the response.  I got as far as step 7 before requesting help.  

    You say:

    7. Permissions screen - uncheck "General" and check "Property-specific". Check the boxes corresponding to the specific fields you would like the user or group to be able to edit.  Click Next.

    This is where the cryptic names mean absolutely nothing to me.  This is specifically where I need help.
    LVL 38

    Accepted Solution

    Well, after more testing it appears that there isn't a way to delegate the "City", "State/province", and "Country/region" fields specifically.

    Instead, uncheck "Property-specific", check "General", and then check "Read and write Personal Information".

    Author Comment

    Must my admin user use Active Directory Users and Computers or Windows Search to change this info, or can she use the Address Book within Outlook?

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    The saying goes a bad carpenter blames his tools. In the Directory Services world a bad system administrator, well, even with the best tools they’re probably not going to become an all star.  However for the system admin who is willing to spend a li…
    [b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now