user attributes

[Pat]

I'm running W2k with AD. how would I modify a user's attributes using
the group properties they are in to only let them go into AD and
change certain properties of users, say for example all users phone
numbers and nothing else.

 

[Tim Hines [MSFT]]

You would have to modify the permisisons on the objects that you want those
users or groups to access. For example if you want james to be able to
modify the phone number for john, you would open AD users & computers,
highlight john, right click and select preoprties. Click the security tab,
click advanced, click add and add james. Click the properties tab and check
allow for "write phone number". Click ok three times to close the boxes.

--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Pat]

Thanks for the response, I'll try it out

 

[Charleta McKoy [MSFT]]

You may be interested in using the Delegation of Control Wizard:

315676 HOW TO: Delegate Administrative Authority in Windows 2000
http://support.microsoft.com/?id=315676

 

[Pat]

can I do the same with a global group. say put james in a global group
called change phone number and change the properties on the group?

 

[Pat]

in the group polices I'm changing, when I'm at the permission entry
screen and I want to apply certain properties to an object. How can i
tell which property belongs to , say the phone field in the users
properties to allow a user to enter that on all other users?

 

[Pat]

in the group polices I'm changing, when I'm at the permission entry
screen and I want to apply certain properties to an object. How can i
tell which property belongs to , say the phone field in the users
properties to allow a user to enter that on all other users?

 

[Jeff Jones [MSFT]]

The mappings of the UI fields to their attributes can be found at
http://msdn.microsoft.com/library/d...ive_directory_users_and_computers_snap-in.asp.

--
Jeff Jones [MS]
Active Directory Administration Tools Development
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.