RE: Modifying Computer Account Description Via Script
- From: v-kzhao@xxxxxxxxxxxxxxxxxxxx ("Ken Zhao [MSFT]")
- Date: Mon, 20 Aug 2007 04:15:11 GMT
Hello,
Thank you for using newsgroup and thanks Steve for his kindly input.
Thanks & Regards,
Ken Zhao
Microsoft Online Support
Microsoft Global Technical Support Center
Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Modifying Computer Account Description Via Script
| thread-index: Acfg5/XG9eVUiPI2ShmIFfE7qNqEEQ==
| X-WBNR-Posting-Host: 207.46.19.197
| From: =?Utf-8?B?am1lZGQ=?= <jmedd@xxxxxxxxxxxxxxxx>
| References: <B0BF23E0-3F79-418A-852A-062FCE537571@xxxxxxxxxxxxx>
<74EB17DF-5260-4385-B1C2-635DFC4703D3@xxxxxxxxxxxxx>
| Subject: RE: Modifying Computer Account Description Via Script
| Date: Fri, 17 Aug 2007 09:02:06 -0700
| Lines: 30
| Message-ID: <57470A9D-2065-4AAD-BFF0-FFB00DF88853@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 8bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windows.server.active_directory
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.active_directory:23415
| NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| X-Tomcat-NG: microsoft.public.windows.server.active_directory
|
| Thanks! That was exactly it.
|
| "Steve B" wrote:
|
| > They will need simply write permission to the Description attribute for
| > Computer objects.
| >
| > You will set this on the OU where the computer accounts are.
| >
| > "jmedd" wrote:
| >
| > > I'm using a script based on a Hey Scripting Guy article
| > >
(http://www.microsoft.com/technet/scriptcenter/resources/qanda/apr05/hey0429
..mspx) which updates the Description field of the computer account.
| > >
| > > The script works fine for me when I run it as an admin account, but
errors
| > > when run from a standard user account.
| > >
| > > General Access Denied Error:
| > > 80070005
| > > Active Directory
| > >
| > > The article states that "...youâ??ll have to make sure that all your
users
| > > have permissions to change the Description attribute for both their
own
| > > account and for the computer account."
| > >
| > > Can anyone enlighten me on what permissions would be needed for a
standard
| > > user to be able to do this? FYI...none of our computer accounts are
in the
| > > default computers container, rather they live in a different OU. I
suspect I
| > > need to delegate some permissions to this OU, but can't find details
anywhere
| > > of what is required.
|
.
- Prev by Date: Operations Masters
- Next by Date: Re: Users don't see any shares after login in
- Previous by thread: Operations Masters
- Next by thread: Re: Can one group be a member of another
- Index(es):
Relevant Pages
|
