N
Nate
I would like to Delegate Control in AD for a user to update GAL
information.
When I right click on the OU and select Delegate Control I selected the
radio box for Create a customer task to delegate --> next I selected
Only the following objects, and then choose User Objects --> Next, and
then Choose Property Specific, and choose:
Read Write Assistant
Read/Write businessCategory
Read/Write BusinessRoles
Read Comment
Read/Write Company
Read Comment
Read/Write Company
Read/Write Department
Read/Write department Numbers
Read/Write Description
Read/Write Department
Read/Write Department Number
Read adminDescription
Read/Write Direct Reports
Read Display Name
Read/Write Division
Read/Write Direct Reports
Read adminDisplayName
Read/Write Division
Read/Write Fax Number
Read First Name
Read/Write Home Phone
Read/Write Home Address
Read/Write Home Phone
Read/Write IP Phone Numbers
Read/Write Job Title
Read/Write Manager
Read Middle Name
Read/Write Mobile Number-
Read/Write Notes
Read/Write Pager Number
Read/Write Post Office Box
Read/Write postalAddress
Read/Write Secretary
Read/Write Street
Read/Write Street Address
Read/Write Telephone Number
Read/Write TelephoneAssistant
Read/Write Title
Read/Write Web Page Address
Read/Write Zip/Postal Code
My question is I do not see the value to allow the delegate to change
the City, State, Country, Office. What am I doing wrong.
Also is there a way to limit the view of what is showin in Active
Directory users and computers? so the Delegate only sees the one OU,
and only 4 tabs granted permissions won't let them change anything
else, but it would be nice to control that view... even if it is
registry hack on that local pc.
information.
When I right click on the OU and select Delegate Control I selected the
radio box for Create a customer task to delegate --> next I selected
Only the following objects, and then choose User Objects --> Next, and
then Choose Property Specific, and choose:
Read Write Assistant
Read/Write businessCategory
Read/Write BusinessRoles
Read Comment
Read/Write Company
Read Comment
Read/Write Company
Read/Write Department
Read/Write department Numbers
Read/Write Description
Read/Write Department
Read/Write Department Number
Read adminDescription
Read/Write Direct Reports
Read Display Name
Read/Write Division
Read/Write Direct Reports
Read adminDisplayName
Read/Write Division
Read/Write Fax Number
Read First Name
Read/Write Home Phone
Read/Write Home Address
Read/Write Home Phone
Read/Write IP Phone Numbers
Read/Write Job Title
Read/Write Manager
Read Middle Name
Read/Write Mobile Number-
Read/Write Notes
Read/Write Pager Number
Read/Write Post Office Box
Read/Write postalAddress
Read/Write Secretary
Read/Write Street
Read/Write Street Address
Read/Write Telephone Number
Read/Write TelephoneAssistant
Read/Write Title
Read/Write Web Page Address
Read/Write Zip/Postal Code
My question is I do not see the value to allow the delegate to change
the City, State, Country, Office. What am I doing wrong.
Also is there a way to limit the view of what is showin in Active
Directory users and computers? so the Delegate only sees the one OU,
and only 4 tabs granted permissions won't let them change anything
else, but it would be nice to control that view... even if it is
registry hack on that local pc.