Re: Granting Write Access to Active Directory User Properties

NRC Help wrote:
One of our programmers is writing an application that will need to modify user properties in Active Directory 2003. By "modify" I mean that the current fields for General, Telephones, Organizational etc. will be written to, but he will also need the ability to create new fields, such as Vita, web page url etc.

What permissions do I need to set, and where do I set them?

You have to give to this application account permissions to write to appropriate AD attributes, check if informations You need are not included in Personal Information Set or other property set:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adschema/adschema/property_sets.asp
http://www.microsoft.com/technet/scriptcenter/topics/security/propset.mspx

Of course You cen delegate permissions to single attributes but property sets simplifies this process a little.

--
Tomasz Onyszko
http://www.w2k.pl/blog/ - (PL)
http://blogs.dirteam.com/blogs/tomek/ - (EN)
.

Relevant Pages

  • RE: Excel 2007 Modify Permissions Problem.
    ... the file ".xls" I need to have Modify permissions turned on. ... I only need Modify for one file in the top directory. ... the top folder, I end up having modified in all of the sub-folders as well. ... we have around 2000 hyperlinks that all get broken. ...
    (microsoft.public.excel.misc)
  • Re: Access To Access
    ... This is usually a filesystem permissions problem. ... file require Modify permissions for the folder containing the file. ... This email account is my spam trap so I ...
    (microsoft.public.inetserver.asp.db)
  • Re: NTFS Berechtigungen W3K3 SP2
    ... You can modify how Windows Explorer handles permissions when objects are ... Ist halt nur blöd, dass ich das an jedem Client machen muss. ...
    (microsoft.public.de.german.windows.server.general)
  • Re: Prevent changes to Administrator password
    ... you need to understand that permissions on the RootDomain\Administrator account are applied via AdminSDHolder so you need to modify the permissions on the AdminSDHolder object in the root domain. ... If you are just having him create a group and modify it using ACLs then if anything goes wrong it can easily be undone by removing the admins from the new group, ... Deny the Restricted Admins group the Write Permissions permission ...
    (microsoft.public.windows.server.active_directory)
  • RE: How to set a "public" directory? (Everyone can add and modify theirown files)
    ... If you chmod the directory o+t, then users can (permissions permitting) ... modify each other's files but not delete them. ...
    (RedHat)
Loading