Active Directory: Delegate access

Hello experts,

I want to delegate access (for a group) to an attribute called userprincipalname, but this attribute does not show in delegate wizard in ADUC. How would I delegate/grant access.

Your assistance is appreciated.
Parity123Asked:
Who is Participating?
 
Shaun VermaakTechnical Specialist/DeveloperCommented:
0
 
MaheshArchitectCommented:
you need to select custom delegation task, then select "user objects" and then grant them "read and write logon information" on user objects
0
 
Parity123Author Commented:
I granted/delegated access to "write logon name" to a group. Is there a way to check if a particular group has the ability to write "userprincipalname".
0
WEBINAR: 10 Easy Ways to Lose a Password

Join us on June 27th at 8 am PDT to learn about the methods that hackers use to lift real, working credentials from even the most security-savvy employees. We'll cover the importance of multi-factor authentication and how these solutions can better protect your business!

 
MaheshArchitectCommented:
yes

Add required user to that group
Then on which OU you have made delegation, on any user account in that OU try to change userprincipalname
0
 
Parity123Author Commented:
I have granted access to the OU. The user is saying he still cannot. He logged off and logged on waited for replication, I want to see if I can generate some report confirming that this group has access to modify this attribute.
0
 
MaheshArchitectCommented:
force ad replication
then check effective permission of that ou where u assigned permissions
0
 
Jason CrawfordTransport NinjaCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Shaun Vermaak (https:#a42435707)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

exchangepro
Experts-Exchange Cleanup Volunteer
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.