• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 427
  • Last Modified:

Active Directory limited admin permissions

I am wanting to give a user the right to modify the description field for each PC in AD. Is there a way to do this without giving them full control to the objects?
0
sullend
Asked:
sullend
1 Solution
 
Joseph DalyCommented:
Yes you can do this using the "delegate control" wizard in active directory users and computers.
0
 
Mike KlineCommented:
When you use the delegation control wizard you will select "create a custom task".  Select computer objects then just give them rights to properties they need.  See screenshot below

delegation

Thanks

Mike
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now