Delegation Assistance

Without going into all the details as to why....

I need to be able to delegate the ability for an account to be able to
modify the following attributes and only the following attributes on a group
of user accounts.

sAMAccountName
userPrincipalName
mailNickName

After looking through the delegation on a user object (ADUC) it doesn't seem
as though the items you can delegate correspond 1 to 1 with the actual
attributes of the object. Example, I go to delegate on an OU and choose the
User object, go to the properties tab and scroll through the entire list. I
don't see any of these three attributes to delegate.

Does anyone know how I would be able to delegate the ability to change these
three attributes on user objects?

Thanks,
Tim



.

Relevant Pages

  • RE: Assigning some rights to users
    ... telephone etc information belongs to the User object in AD. ... are unable to modify them in Outlook. ... Right click the Users contained and select "Delegate Control" ... Under Permissions we check "General", ...
    (microsoft.public.exchange2000.active.directory.integration)
  • Re: Cant anyone help me with this?
    ... check on the ACL of that user object. ... Make sure that your helpdesk really ... > What I have done is to delegate the change password and reset password ... > password or the option to unlock an account is simply grayed out. ...
    (microsoft.public.windows.server.migration)
  • Re: Delegation Assistance
    ... The attributes don't correspond to what you can delegate (or give ... You will need to edit the security ... >> After looking through the delegation on a user object it doesn't ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegation Assistance
    ... You will need to edit the security on the OU level you want this delegation or you need to use dsacls which is a command line security tool. ... I need to be able to delegate the ability for an account to be able to modify the following attributes and only the following attributes on a group of user accounts. ... After looking through the delegation on a user object it doesn't seem as though the items you can delegate correspond 1 to 1 with the actual attributes of the object. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegate rights to configure Terminal Services Profile for a u
    ... I've looked everywhere including all the attributes for the user object ... Services Profile is stored in the SAM so it doesn't look like this particular ... >> delegate rights to set a user's Terminal Services profile. ... > the Delegation of Control Wizard? ...
    (microsoft.public.win2000.active_directory)