Active Directory contact information editing

[Guest]

Is there a way to allow users to change their contact information in AD
without giving them too much access?

We have been noticing a lot of important fields are not getting filled out
IE phone number, reports to, extension etc. Ideally I would like users to got
to a website to change this info.

Can i do this using an taskpad view? any help would be great.

Thanks
GBRX admin

 

[Tomasz Onyszko]

Is there a way to allow users to change their contact information in AD
without giving them too much access?

We have been noticing a lot of important fields are not getting filled out
IE phone number, reports to, extension etc. Ideally I would like users to got
to a website to change this info.

Can i do this using an taskpad view? any help would be great.

I think that personal information property set contains all attributes
You want to get updated by Your user:
http://msdn.microsoft.com/library/d.../adschema/adschema/r_personal_information.asp

 

[Guest]

Thanks for the reply. Maybe i am missing something but what am i supposed to
do with the property sets?

 

[Tomasz Onyszko]

Thanks for the reply. Maybe i am missing something but what am i supposed to
do with the property sets?

You were asking how to give user access to these informations without
giving them to much .. this is your answer - they need only right to
write to personal information property set

 

[Jerold Schulman]

http://www.microsoft.com/technet/scriptcenter/topics/security/propset.mspx

Thanks for the reply. Maybe i am missing something but what am i supposed to
do with the property sets?

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com

 

[Ken Aldrich]

I think there are two things that you need to meet your goals.

1) Assign the users the right in active directory to modify their own user
objects. You can do this with the advice you've been given above, you can
use the delegation wizard, or by manually editing the security tab on each
user.

2) Come up with a mechanism that allows the users to edit those fields
easily. You don't want to give them ADUC because you have to teach them
what not to do in there. A web-based form may be nice, but its a lot of
work to set it up. My suggestion is to use one of our products called
DSRAZOR for Windows. There are standalone applets that you can depoloy to
the user's desktops or to a share that lets them edit their information.
The applet is fully customizable in the Designer so that you can pick which
fields you want your users to see and be able to edit. This creates a nice,
clean UI for your users that they will be comfortable and familiar with.
You can have them edit any attribute you want, as long as they have rights.
Check out our website at www.visualclick.com and sign up for a free
evaluation.