Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

I need to set up a user in active directory to modify cosmetic account settings, such as office, address and display name, what group can I put it in?

Posted on 2014-02-25
3
Medium Priority
?
298 Views
Last Modified: 2014-02-26
We have a 2008r2 active directory domain. I need to set up a user so she can use ADUC (active directory users and computers) to modify cosmetic changes in user accounts, such as job title, address and display name. I have tried making her an acccount operator but that does not give her permission to change anything. Is there a group other then domain admin, that I can use?
0
Comment
Question by:Thor2923
3 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 39885825
You can use the delegation control wizard > custom task > user objects and then give rights to spefic properties.

I'm at work so can't transfer screenshots right now but I can later if you would like...just let me know.

Thanks

Mike
0
 
LVL 4

Expert Comment

by:michaelalphi
ID: 39888095
Hi Thor,
You can follow step-wise instruction explained in this article to modify cosmetic changes in user accounts : http://www.activewin.com/win2000/step_by_step/active_directory/delegsteps.shtml
Hope, this helps you.
0
 
LVL 1

Author Closing Comment

by:Thor2923
ID: 39889791
worked like a champ! thanks
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question