Link to home
Start Free TrialLog in
Avatar of cawasaki
cawasaki

asked on

active directory delegation

hi,

i need to give in one account this right:

modify this attribute of all users in OU users:

departement
telephonenumber
employeetype
title

its is possible to do that?

i have an AD 2003 AND AD 2008R2

thanks
Avatar of Krzysztof Pytko
Krzysztof Pytko
Flag of Poland image

Yes it is. Please review articles on my blog for that and if you still need help, let me know
http://kpytko.wordpress.com/2012/05/16/active-directory-rights-delegation-overview/
http://kpytko.wordpress.com/2012/05/17/active-directory-rights-delegation-part-1/

Regards,
Krzysztof
ASKER CERTIFIED SOLUTION
Avatar of motnahp00
motnahp00
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
going through the delegation control wizard you can get granular.  Select custom task and then user objects.  I just took some screen shots that may also help


User generated image
 User generated image
User generated image
Thanks

Mike
Disregard I found it:

Read Employee Type
Write Employee Type

This should cover all 4 attributes you requested.
Avatar of cawasaki
cawasaki

ASKER

thanks