I need to set up a user in active directory to modify cosmetic account settings, such as office, address and display name, what group can I put it in?

Thor2923
Thor2923 used Ask the Experts™
on
We have a 2008r2 active directory domain. I need to set up a user so she can use ADUC (active directory users and computers) to modify cosmetic changes in user accounts, such as job title, address and display name. I have tried making her an acccount operator but that does not give her permission to change anything. Is there a group other then domain admin, that I can use?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2013
Commented:
You can use the delegation control wizard > custom task > user objects and then give rights to spefic properties.

I'm at work so can't transfer screenshots right now but I can later if you would like...just let me know.

Thanks

Mike
Hi Thor,
You can follow step-wise instruction explained in this article to modify cosmetic changes in user accounts : http://www.activewin.com/win2000/step_by_step/active_directory/delegsteps.shtml
Hope, this helps you.

Author

Commented:
worked like a champ! thanks

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial