Solved

Delegate authority to change AD basic user details

Posted on 2011-02-18
3
1,099 Views
Last Modified: 2012-05-11
What is the easiest way nowadays to delegate or give an office admin person the ability to change basic user details (eg job title, phone number) in Active Directory?

Are there any simple tools out there other than adminpak?

We're on a windows 2008R2 level domain.

I thought I'd check to see what others are using as I do not have too much time to investigate otherwise.
0
Comment
Question by:agradmin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 300 total points
ID: 34926104
Nothing much has changed in terms of delegation and tools the office admin would use in 2008 R2.   You can use the delegation control wizard or you can get granular and go give them rights in AD just to change specific attributes.

You can also extend the delegation control wizard  http://adisfun.blogspot.com/2009/08/extend-ad-delegation-control-wizard.html

Not sure if you get Windows IT Pro Magazine but if you do checkout the cover story from Brian Desmond...good delegation paper.

Thanks

Mike
0
 
LVL 2

Assisted Solution

by:temores
temores earned 200 total points
ID: 35162235
If you're on windows 2008R2 you can use the active directory admin center or you can use powershell cmdlets for managing.

You can also use powergui from quest to create your own powershell-based GUI  (http://powergui.org/)

cheers.
0
 

Author Closing Comment

by:agradmin
ID: 35314613
Looks like there is still no simple way to accomplish this task.

Thanks for the help - at least now I know....
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Postmortem reporting allow us to examine mistakes in a way that focuses on the situational aspects of a failure’s mechanism and the decision-making process of individuals proximate to the failure. Read our guide on how to handle IT post-mortem repor…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question