Solved

Active Directory limited admin permissions

Posted on 2013-05-30
2
417 Views
Last Modified: 2013-05-30
I am wanting to give a user the right to modify the description field for each PC in AD. Is there a way to do this without giving them full control to the objects?
0
Comment
Question by:sullend
2 Comments
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 39208622
Yes you can do this using the "delegate control" wizard in active directory users and computers.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 39208842
When you use the delegation control wizard you will select "create a custom task".  Select computer objects then just give them rights to properties they need.  See screenshot below

delegation

Thanks

Mike
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Drive mapping problem 7 44
2008 R2 time server is invalid 6 33
No IP Address Assigned to VM 10 88
Multiple Errors from DCDIAG 2 21
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question