Re: Delegating control
- From: "chriss3 [MVP]" <nospamhere_chrisse@xxxxxxxxxx>
- Date: Thu, 21 Sep 2006 19:10:18 +0200
Hello
You can modify the security within AD Users and Computers by first click the View menu and select advanced mode. Right Click the particular OU where you what the delegation to take place, Click the Security Tab, Click Advanced and grant a security principal (users, group, computer) Read and Write object to the mail attribute and have it applied to child objects, or only to user objects if you only want to delegate the ability to modify the mail attribute on user accounts.
You can also use the command line based tool dsacls with the following syntax:
dsacls "<ContainerPath>" /I:S /G "<domain>\<alias>:RPWP;mail;user"
--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services
----------------------------------------------------------------
http://www.chrisse.se - Active Directory Resources
"aj" <aj@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:A6078983-4F53-4B8E-BA3A-814B5D5C6D45@xxxxxxxxxxxxxxxx
Please help :)
I want to set delegation for one user who must enter email adresses in
active directory account, but only that.
Email adressess are in "General" tab of account properties and even I set
delegation with "Delegate Control wizard", then set that this user can Read
and write General properties USER can not write on column Email.
Thanx in advanced
Igor
.
- Follow-Ups:
- Re: Delegating control
- From: boxer
- Re: Delegating control
- Prev by Date: Re: Deleted User
- Next by Date: Re: multiple domains
- Previous by thread: Re: DFS
- Next by thread: Re: Delegating control
- Index(es):
Relevant Pages
|
Loading