Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Deligate user to update their self information on AD such as phone number.

Posted on 2009-04-02
7
Medium Priority
?
158 Views
Last Modified: 2012-05-06
I'd like let user to update their particular self user account information such as Phone informaton or Department Information. It seems that it is not allowed by default in AD. I know deligation wizard might help but I'm not sure if it can restrict the access to "self". I don't want user to change another peoples information. Also want to be flexible to permit/restrict updateable field.
0
Comment
Question by:kimakabane
  • 5
  • 2
7 Comments
 
LVL 7

Expert Comment

by:maze-uk
ID: 24049383
Best Practices for Delegating Active Directory Administration
http://www.microsoft.com/downloads/details.aspx?familyid=631747a3-79e1-48fa-9730-dae7c0a1d6d3&displaylang=en

In the appendice of this document, you'll find the exact rights necessary. I suppose the right should be given to 'SELF'
0
 

Author Comment

by:kimakabane
ID: 24050329
Thanks, but I hope to know step by step procedure with some example.
0
 
LVL 7

Expert Comment

by:maze-uk
ID: 24050871
on the GPO containing the users, right click on it, and select properties.
Go into security, advanced
Click Add...
type SELF, and click OK
(optional: if users name or account contain 'self', they will show here, so select the one with 'SELF' as RDN, and click OK)
in PERMISSIONS ENTRY FOR USERS: on the Properties Tab,
in Apply onto, select User Objects,
then select the permission/proipery you want to apply.
Once finished, click OK as menay times as necessary to close the windows...
0
Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

 
LVL 7

Expert Comment

by:maze-uk
ID: 24050896
exemple of permissions you'll find:
'Write General Information', will allow the user to edit his email and phone number...
0
 
LVL 7

Expert Comment

by:maze-uk
ID: 24050910
though I can see there is a specific one for mail and phone too: 'Write Phone and Mail Option'...
0
 
LVL 7

Accepted Solution

by:
maze-uk earned 1000 total points
ID: 24050938
I attach a screenshot:
advancedsecurity.jpg
0
 

Author Comment

by:kimakabane
ID: 24051112
Thanks! Very helpful.
0

Featured Post

Become an Android App Developer

Ready to kick start your career in 2018? Learn how to build an Android app in January’s Course of the Month and open the door to new opportunities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
A quick solution showing how to control and open a POS Cash Register Drawer using VBA with MS Access.
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…
Suggested Courses

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question