Solved

Delegate authority to change AD basic user details

Posted on 2011-02-18
3
1,095 Views
Last Modified: 2012-05-11
What is the easiest way nowadays to delegate or give an office admin person the ability to change basic user details (eg job title, phone number) in Active Directory?

Are there any simple tools out there other than adminpak?

We're on a windows 2008R2 level domain.

I thought I'd check to see what others are using as I do not have too much time to investigate otherwise.
0
Comment
Question by:agradmin
3 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 300 total points
ID: 34926104
Nothing much has changed in terms of delegation and tools the office admin would use in 2008 R2.   You can use the delegation control wizard or you can get granular and go give them rights in AD just to change specific attributes.

You can also extend the delegation control wizard  http://adisfun.blogspot.com/2009/08/extend-ad-delegation-control-wizard.html

Not sure if you get Windows IT Pro Magazine but if you do checkout the cover story from Brian Desmond...good delegation paper.

Thanks

Mike
0
 
LVL 2

Assisted Solution

by:temores
temores earned 200 total points
ID: 35162235
If you're on windows 2008R2 you can use the active directory admin center or you can use powershell cmdlets for managing.

You can also use powergui from quest to create your own powershell-based GUI  (http://powergui.org/)

cheers.
0
 

Author Closing Comment

by:agradmin
ID: 35314613
Looks like there is still no simple way to accomplish this task.

Thanks for the help - at least now I know....
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question