Re: Allow users to update their own AD attributes?

From: Eric Fleischman [MSFT] (efleis_at_online.microsoft.com)
Date: 07/24/04


Date: Sat, 24 Jul 2004 15:05:04 -0500

Absolutely. Instead of granting permissions to a specified user, select SELF
as the user you want to grant perms to.
So if you were to do this on an OU and set the inehritance bit, all users in
the OU would be able to modify the items you grant SELF perms to on
themselves and only themselves.

~Eric

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Fletcher" <iliketodirtbike@hotmail.com> wrote in message 
news:uqSvKSNcEHA.1652@TK2MSFTNGP09.phx.gbl...
> Hello,
>
> We have a Windows 2003 AD with Exchange Server 2003. I am wondering if 
> there is a way to allow users to add data to their own AD account through 
> the Exchange GAL? I assume this is a permissions issue... and I sure don't 
> want to go manually changing permissions on 9,000 user accounts to allow 
> specific edits... so maybe my real question is "is there a way to, in 
> bulk, allow users to add info. to their own accounts by using a Group 
> Policy, etc.."?
>
> Any suggestions are very much appreciated!
>
> Thanks
> 


Relevant Pages

  • Re: Allow users to update their own AD attributes?
    ... Instead of granting permissions to a specified user, ... as the user you want to grant perms to. ... > want to go manually changing permissions on 9,000 user accounts to allow ...
    (microsoft.public.windows.server.active_directory)
  • Re: File Sharing (again - sorry, Pd)
    ... InTerminal, type umask. ... Back in the good old days, Mac OS X user accounts ... The reason that the file permissions are "resetting" each time the ... that folder inherit the ACLs from the folder. ...
    (uk.comp.sys.mac)
  • Re: Security Group Keeps getting removed???
    ... ACL on all security principals (users, groups, and machine accounts) present ... Delegated permissions are not available and inheritance is automatically ... AdminSDHolder Object Affects Delegation of Control for Past Administrator ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegating AD Rights (Enable/Disable Accounts)
    ... I will definitely pass it on to my Customer ... user accounts in AD to non-admin staff so that they will be able to ... permissions as Domain User rights will work just fine. ... The UMRA ...
    (microsoft.public.windows.server.scripting)
  • Re: Delegation - Password Reset - Access Denied
    ... If you go to properties of an AD object, select the security tab and click ... on advanced you should be on the permissions tab. ... WARNING - Any implicit permissions defined will be lost and reset back to ... Accounts in the OU and found that the BldgAdmins group was not listed. ...
    (microsoft.public.windows.server.active_directory)