In my company i write little program who get all LDAP users info from Active Directory. Our employer need to change with that program some personal info like, GSM number, department or title.
Program work correct , but still need to have permission from user who is login on computer where that program is running. If is running on Admin User then everything is fine, but i need to run that program on normal user.
My question is, where in WinSrv 2008 R2 (Domain Controller) and how i can add privilege for normal AD user who can change personal info from added users in Active Directory .