Re: Delegation Assistance

That is how I was trying to do it.... with dsacls or going to the security
tab of the object.

The attributes don't correspond to what you can delegate (or give
permissions to).




"Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx> wrote in message
news:Oc5XCEoWFHA.2128@xxxxxxxxxxxxxxxxxxxxxxx
> You can't use the wizard to do it. You will need to edit the security
> (right click properties and then security) on the OU level you want this
> delegation or you need to use dsacls which is a command line security
> tool.
>
> joe
>
> --
> Joe Richards Microsoft MVP Windows Server Directory Services
> www.joeware.net
>
>
> Tim Kalligonis wrote:
>> Without going into all the details as to why....
>>
>> I need to be able to delegate the ability for an account to be able to
>> modify the following attributes and only the following attributes on a
>> group of user accounts.
>>
>> sAMAccountName
>> userPrincipalName
>> mailNickName
>>
>> After looking through the delegation on a user object (ADUC) it doesn't
>> seem as though the items you can delegate correspond 1 to 1 with the
>> actual attributes of the object. Example, I go to delegate on an OU and
>> choose the User object, go to the properties tab and scroll through the
>> entire list. I don't see any of these three attributes to delegate.
>>
>> Does anyone know how I would be able to delegate the ability to change
>> these three attributes on user objects?
>>
>> Thanks,
>> Tim
>>
>>

.

Relevant Pages

  • Re: Delegation Assistance
    ... You will need to edit the security on the OU level you want this delegation or you need to use dsacls which is a command line security tool. ... I need to be able to delegate the ability for an account to be able to modify the following attributes and only the following attributes on a group of user accounts. ... After looking through the delegation on a user object it doesn't seem as though the items you can delegate correspond 1 to 1 with the actual attributes of the object. ...
    (microsoft.public.windows.server.active_directory)
  • Re: problem delegating some user management power to a group
    ... What the Delegation Of Control Wizard dose is to modify the security for the ... >> You have to delegate the reset password right. ... >> Microsoft MVP - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • [NEWS] DeleGate Pointer Array Overflow May Let Remote Users Execute Arbitrary Code
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... DeleGate is a multi-purpose ...
    (Securiteam)
  • Re: Help with Delegation Wizard
    ... OU but not in the security properties of the individual users in that OU. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Root privilege (SOLVED)
    ... Upgrading those binaries is a potential security ... AFAICT sudo is actually plugging some of the holes mentioned in that ... It has logging and you can delegate specific tasks or even ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)