Avatar of cawasaki
cawasaki
 asked on

active directory delegation

hi,

i need to give in one account this right:

modify this attribute of all users in OU users:

departement
telephonenumber
employeetype
title

its is possible to do that?

i have an AD 2003 AND AD 2008R2

thanks
Active Directory

Avatar of undefined
Last Comment
cawasaki

8/22/2022 - Mon
Krzysztof Pytko

Yes it is. Please review articles on my blog for that and if you still need help, let me know
http://kpytko.wordpress.com/2012/05/16/active-directory-rights-delegation-overview/
http://kpytko.wordpress.com/2012/05/17/active-directory-rights-delegation-part-1/

Regards,
Krzysztof
ASKER CERTIFIED SOLUTION
motnahp00

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Mike Kline

going through the delegation control wizard you can get granular.  Select custom task and then user objects.  I just took some screen shots that may also help


1
 2
3
Thanks

Mike
motnahp00

Disregard I found it:

Read Employee Type
Write Employee Type

This should cover all 4 attributes you requested.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
cawasaki

ASKER
thanks