create user with privs to mod their own or other user info

[Blaqb0x]

Hi,

I've created a web form PHP/LDAP that modifies a user's information e.g
title, description, etc and password in Active Directory(Win2k3).

In order for the form to edit the information for a particular user it has
to have administrative priviliges on the domain. Is there a way to create a
user that has priviliges to edit user information and/or passwords but,
isn't a domain wide admin?

Thanks.

 

[Jerold Schulman]

Hi,

I've created a web form PHP/LDAP that modifies a user's information e.g
title, description, etc and password in Active Directory(Win2k3).

In order for the form to edit the information for a particular user it has
to have administrative priviliges on the domain. Is there a way to create a
user that has priviliges to edit user information and/or passwords but,
isn't a domain wide admin?

Thanks.

See tip 10167 » How can I allow users to maintain their own personal information in Active Directory?
in the 'Tips & Tricks' at http://www.jsifaq.com

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com

 

[james.lloyd]

Hi,
Im writing a bunch of scripts to do exactly that. So far I have it
working so any user can use a web form, that will use pass through
authentication (iis dependant) and then edit their own attributes. Im
currently working on the side that requires the Secure ldap connection
(password changes etc).

you can see progress at http://www.phpadadmin.com

Cheers

James