Re: Delegating control of the GAL to our HR

From: Ace Fekay [MVP] (PleaseSubstituteMyActualFirstName&LastNameHere_at_hotmail.com)
Date: 07/13/04 

Date: Mon, 12 Jul 2004 22:32:09 -0400

In news:%23slyrqCaEHA.384@TK2MSFTNGP10.phx.gbl,
CL <cl@mail> asked for help and I offered my suggestions below:
> I need to be able to delegate control of the Global Address book to
> our HR department to maintain office addresses, telephone numbers and
> extensions. Is there a KB article on how to accomplish this???
>
> Thanks
>
> CL

Keep in mind these are AD permissions on AD user objects. Since you do not
want to delegate HR the ability to create or delete an address list, which
would be an Exchange delegation (permision), then we need to look to AD. The
RUS updates the address lists from properties of the user accounts in AD. So
you would need to delegate HR users this ability on a user account,
preferrably by OUs to allow HR to update user information in their account
properties.The you can create a custom MMC to allow HR users to only see
those specific user objects and only give them specific tasks they can
perform on the user accounts.

Step-by-Step Guide to Using the Delegation of Control Wizard (AD):
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/delegsteps.asp

315676 - HOW TO- Delegate Administrative Authority in Windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;315676

230263 - How To Create Custom MMC Snap-in Tools Using Microsoft Management
Console:
http://support.microsoft.com/default.aspx?scid=kb;en-us;230263

271950 - Microsoft Management Console Overview White Paper:
http://support.microsoft.com/default.aspx?scid=kb;en-us;271950

---
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Active Directory

HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig. 

-- 
=================================

Relevant Pages

  • Re: Delegation to create user accounts only and not disable or delete
    ... Choose the "create custom task to delegate" click next ... select the "This folder, existing objects in this folder, and creation of ... Administration has found out that this teacher has been disabling user ... delete or manage user accounts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD account admin delegation and moving all user accounts to an OU
    ... If you don't want them to have that, use a provisioning process of some sort. ... Joe Richards Microsoft MVP Windows Server Directory Services ... I want to delegate the adding and removal of user accounts to a ...
    (microsoft.public.win2000.security)
  • Re: Allowing HelpDesk to create Mailboxes when creating accounts
    ... could not create user accounts. ... You delegated the DOMAIN\HelpDesk group Exchange View-Only Adminsitrator ... where in Active Directory did you delegate permission to this ... Exchange 2007 Permissions: Frequently Asked Questions ...
    (microsoft.public.exchange.admin)
  • How to delegate "Create Mailbox" rights?
    ... Small office here and would like to delegate the right to my helpdesk ... to create user accounts with mailboxes. ...
    (microsoft.public.exchange.admin)
  • Re: non-admins modifying AD user accounts
    ... that holds user accounts rightclick on ou and select delegate ... Thi gives you the ability to delegate some administrative tasks to ... some non admin users. ...
    (microsoft.public.win2000.active_directory)
Quantcast