Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 160
  • Last Modified:

Deligate user to update their self information on AD such as phone number.

I'd like let user to update their particular self user account information such as Phone informaton or Department Information. It seems that it is not allowed by default in AD. I know deligation wizard might help but I'm not sure if it can restrict the access to "self". I don't want user to change another peoples information. Also want to be flexible to permit/restrict updateable field.
0
kimakabane
Asked:
kimakabane
  • 5
  • 2
1 Solution
 
maze-ukCommented:
Best Practices for Delegating Active Directory Administration
http://www.microsoft.com/downloads/details.aspx?familyid=631747a3-79e1-48fa-9730-dae7c0a1d6d3&displaylang=en

In the appendice of this document, you'll find the exact rights necessary. I suppose the right should be given to 'SELF'
0
 
kimakabaneAuthor Commented:
Thanks, but I hope to know step by step procedure with some example.
0
 
maze-ukCommented:
on the GPO containing the users, right click on it, and select properties.
Go into security, advanced
Click Add...
type SELF, and click OK
(optional: if users name or account contain 'self', they will show here, so select the one with 'SELF' as RDN, and click OK)
in PERMISSIONS ENTRY FOR USERS: on the Properties Tab,
in Apply onto, select User Objects,
then select the permission/proipery you want to apply.
Once finished, click OK as menay times as necessary to close the windows...
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
maze-ukCommented:
exemple of permissions you'll find:
'Write General Information', will allow the user to edit his email and phone number...
0
 
maze-ukCommented:
though I can see there is a specific one for mail and phone too: 'Write Phone and Mail Option'...
0
 
maze-ukCommented:
I attach a screenshot:
advancedsecurity.jpg
0
 
kimakabaneAuthor Commented:
Thanks! Very helpful.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 5
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now