Re: delagation problems

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Chriss3 [MVP] (noSpamHere_at_chrisse.se)
Date: 01/05/05 

Date: Wed, 5 Jan 2005 16:23:49 +0100

Hello Ray,
Have you granted the group both read and write access to the correct
property, and also ensure it applies to child objects (If you do the
delegation at the OU level) or This object and child objects. 

-- 
Regards
Christoffer Andersson
Microsoft MVP - Directory Services
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"Ray Breen" <RayBreen@discussions.microsoft.com> skrev i meddelandet 
news:D7CA8B1E-DED1-4382-9F23-866E5132BC97@microsoft.com...
> Hi Guys,
>
> I have been trying to delegate various basic rights to a basic
> administration group but for the life of me I am getting nowhere. I 
> followed
> the exact steps in a reference ms document
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/stepbystep/ctrlwiz.mspx#EAAA .
>
> Basically I want to be able delegate the authority so girls in the admin
> section can update peoples telephone no's, basic addresses and the likes 
> and
> followed the last example in that document.
>
> When they try and do this via either aduc or search for people, they do 
> not
> have write access to the information. Unfortunately our AD layout is not
> overly organised so we do not have one overall ou container for users, but
> they are contained in several ou's at the highest level.
>
> Although i did try the same instructions on a single ou to see if it was 
> an
> issue with inheritance not working properly but with the same results.
>
> Any ideas?
>
> Cheers
>
> Ray

Relevant Pages

  • Re: OU Security Delegation
    ... (Repeated from the thread "Delegate Move of Computers Between OUs"). ... The default is that added permissions are applied to "This object only". ... need to change this to "This object and all child objects", ... the computer gets the settings from all the GPOs that apply to the target OU during the restart required to join the computers to the domain, so it has the desired settings immediately. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Help with Delegation Wizard
    ... There is no Reset or Change Password in the available permissions listed ... "Child Objects Only" and that didn't do it either. ... Funny thing is if I create another OU in the Delegated OU, the permissions ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegate Move of Computers Between OUs
    ... I should have added to my previous post that I've avoided using the Delegate Control Wizard for several reasons: ... To change this so that it is inherited downwards through the OU hierarchy, you need to change this to "This object and all child objects", or to child objects of a particular type. ... >> Computer Objects, Full Control ... >>>I am trying to delegate permissions to a group for moving existing ...
    (microsoft.public.windows.server.active_directory)
  • Re: delagation problems
    ... Ensure the girls are not members of any group that is ... > delegation at the OU level) or This object and child objects. ... >> Basically I want to be able delegate the authority so girls in the admin ... >> overly organised so we do not have one overall ou container for users, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Multicast delegates and hashtable problem
    ... Because that was the container in: http://msdn.microsoft.com/en-us/library/8627sbea.aspx ... Hashtable/ArrayList/etc. ... where the key is a string and the value is a delegate. ... They show how you can traverse backwards ...
    (microsoft.public.dotnet.languages.csharp)