Re: Best way for users to edit their AD entries?

From: Chriss3 (noSpamHere_at_chrisse.se)
Date: 03/04/04 

Date: Thu, 4 Mar 2004 01:32:25 +0100

Hi BenF!

You can use the Delegate Of Control Wizard at the Domain node and Delegate
Control for the DYNAMICAL Account SELF, As you have found out SELF are by
default granted access to write few attributes. With in the Delegate Of
Control Wizard you can chose the fields to fit your needs with customized
permission.

Step-by-Step Guide to Using the Delegation of Control Wizard
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/delegsteps.asp

The best way I know of to let users edit there own attributes such in your
case are to let them do this by browse the Directory from My Network Places,
Directory doesn't appears in My Network Places by default since Windows XP,
But this can be enabled.

329495 - The Directory Icon in Entire Network in My Network Places Is
Missing
http://support.microsoft.com/default.aspx?scid=kb;en-us;329495

I'm wish you good luck. 

-- 
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
"BenF" <noemail@nothx.com> skrev i meddelandet
news:f9pc40tk5hcog1d0hpe10vnqmsnmedcv17@4ax.com...
> Everyone recommend this be like a help desk ticket type of thing and
> have it controlled by the admins? Or is there a way to delegate users
> the permission to edit certain fields in their contact info? Ideally
> people would want to be able to easily change their email, phone#,
> mobile#, display name.... who knows how often.
>
> If i go to ...
> Start --> Search --> For People
> Then select Active Directory and seach for myself I can pull up my
> entry but most fields are greyed out for editting. How do you adjust
> this? Or anyone know a good web based way to do this? Maybe a third
> party product?

Relevant Pages

  • Re: Best way for users to edit their AD entries?
    ... messing something up so stopped half way through. ... >You can use the Delegate Of Control Wizard at the Domain node and Delegate ... >case are to let them do this by browse the Directory from My Network Places, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Limited Access to ADU&C for HR?
    ... See the Step-by-Step Guide to Using the Delegation of Control Wizard ... This guide shows how to delegate control of objects in an Active Directory ... This person would be allowed to use Active Directory Users &> Computers ...
    (microsoft.public.win2000.active_directory)
  • Re: DCPROMO Failed "This is not the last DC in the domain"
    ... Hi Bray as Matjaz says use the delegate of control wizard. ... how to delegate control of objects in an Active Directory service container, ... Step-by-Step Guide to Using the Delegation of Control Wizard: ...
    (microsoft.public.win2000.active_directory)
  • Re: Limited Access to ADU&C for HR?
    ... > Hello Rube, ... > This guide shows how to delegate control of objects in an Active Directory ... using the Delegation of Control wizard in the Active ... > Directory Users and Computers snap-in. ...
    (microsoft.public.win2000.active_directory)
  • Re: Delegation not working
    ... Nick did you used the Delegate of control wizard to delegate the group ... > I do not want to put the group back as Domain admins, ...
    (microsoft.public.win2000.active_directory)
Loading