Re: Is it possible,,,

From: Dmitry Korolyov [MVP] (d__k_at_removethispart.mail.ru)
Date: 04/26/04 

Date: Mon, 26 Apr 2004 18:40:25 +0400

In order to delegate the user rights to modify a group membership, you must
grant him Write permission on the "members" attribute of a group object. 

-- 
Dmitry Korolyov [d__k@removethispart.mail.ru]
MVP: Windows Server - Active Directory
  "doug" <anonymous@discussions.microsoft.com> wrote in message
news:430301c42b9a$fb0037f0$a601280a@phx.gbl...
  ...to delegate a user to be able to modify (add/delete)
  users from groups in AD? The person would not have to
  ability to create users or groups, only the ability to
  add / delete users from groups that already exist.
  Any ideas?
  doug

Relevant Pages

  • Re: Allow group owner to add/remove users for groups they own.
    ... the creator owner of a group has the ability to modify it's group membership. ... delegate the ability to manage the members of a group to some other user or group. ... add/remove users for groups they own either through a script or custom ...
    (microsoft.public.windows.server.active_directory)
  • Is it possible,,,
    ... ...to delegate a user to be able to modify (add/delete) ... ability to create users or groups, ...
    (microsoft.public.windows.server.active_directory)
  • Re: extend permissions in AD
    ... a custom task to delegate" option using the above wizard. ... would be nice if I can modify the ADSIEdit to show my customized ... >> Is there a way to extend the set of permissions in AD? ... edit directions, modify directions etc.? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegate Control issue
    ... I thought you were attempting to delegate but you are having trouble delegating. ... The adminSDHolder prevents your users from inheriting any permissions so unless they are explicitly defined or part of a group membership you are getting burned by AdminSDHolder. ... "Paul Bergson" wrote: ... > The issue is that people in the older groups can't even modify their ...
    (microsoft.public.windows.server.active_directory)
  • Re: delegating rights
    ... security groups or add accounts to security groups. ... Will they be able to modify exchange properties to those accounts? ... You can certainly delegate control, delegate a subset, ...
    (microsoft.public.windows.server.active_directory)