[howto] give write/modify access to some fields of the AD

[Pierre Bru]

hi,

I would like to give write/modify access to some part of the AD (some
OU) to people in charge of departments, but I would not like to give
them full access to accounts, only to some fields (office number,
telephone, etc.).

is it possible to setup a console (or any other method) to do that ?

TIA,
Pierre.

 

[Jorge de Almeida Pinto [MVP]]

see if the following helps:
http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx

 

[Jorge Silva]

Hi

You need to delegate control over the OU
Right click the OU and choose delegate control, then choose the especific
task(s) to delegate control of.

--
I hop that helps

Good Luck
Jorge Silva
MCSA
Systems Administrator

 

[Steven L Umbach]

Right click the OU and select delegate control. That will start the wizard.
Select the user/group you want to delegate permissions to, select create
custom task, select only the following objects - user, make sure general and
property specific are selected, and then select the permissions you want to
delegate. You can also do the same thing by selecting properties,
security/advanced and then adding the users/group with the permissions you
want for user object under "apply onto" and selecting the properties tab. --
Steve