Re: Delegation Assistance

You can't use the wizard to do it. You will need to edit the security (right click properties and then security) on the OU level you want this delegation or you need to use dsacls which is a command line security tool.

   joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


Tim Kalligonis wrote: 
Without going into all the details as to why....

I need to be able to delegate the ability for an account to be able to modify the following attributes and only the following attributes on a group of user accounts.

sAMAccountName
userPrincipalName
mailNickName

After looking through the delegation on a user object (ADUC) it doesn't seem as though the items you can delegate correspond 1 to 1 with the actual attributes of the object. Example, I go to delegate on an OU and choose the User object, go to the properties tab and scroll through the entire list. I don't see any of these three attributes to delegate.

Does anyone know how I would be able to delegate the ability to change these three attributes on user objects?

Thanks,
Tim



.

Relevant Pages

  • Re: problem delegating some user management power to a group
    ... What the Delegation Of Control Wizard dose is to modify the security for the ... >> You have to delegate the reset password right. ... >> Microsoft MVP - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • [NEWS] DeleGate Pointer Array Overflow May Let Remote Users Execute Arbitrary Code
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... DeleGate is a multi-purpose ...
    (Securiteam)
  • Re: Delegation Assistance
    ... The attributes don't correspond to what you can delegate (or give ... You will need to edit the security ... >> After looking through the delegation on a user object it doesn't ...
    (microsoft.public.windows.server.active_directory)
  • Re: Root privilege (SOLVED)
    ... Upgrading those binaries is a potential security ... AFAICT sudo is actually plugging some of the holes mentioned in that ... It has logging and you can delegate specific tasks or even ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)
  • Re: Help with Delegation Wizard
    ... OU but not in the security properties of the individual users in that OU. ...
    (microsoft.public.windows.server.active_directory)
Loading