Solved

Active Directory limited admin permissions

Posted on 2013-05-30
2
412 Views
Last Modified: 2013-05-30
I am wanting to give a user the right to modify the description field for each PC in AD. Is there a way to do this without giving them full control to the objects?
0
Comment
Question by:sullend
2 Comments
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 39208622
Yes you can do this using the "delegate control" wizard in active directory users and computers.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 39208842
When you use the delegation control wizard you will select "create a custom task".  Select computer objects then just give them rights to properties they need.  See screenshot below

delegation

Thanks

Mike
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now