Delegation

[Darren Jones]

I've set up delegation to allow junior admin to create
computer objects. However, they are not able to modify the
description attribute. What permissions are necessary in
order to allows this?

 

[MadDHatteR]

Simply allow "Write Description" permission for the given user/group in the
security properties of the computer/OU.

You will find this in the Active Directory Users and Computers mmc snap-in,
in Properties -> Security -> Advanced. To allow writing to the description
field of all computers within an OU, set the permissions to apply to
computer objects, and you should be able to scroll down and see the usual
Allow/Deny checkboxes for "Write Description"

\\ MadDHatteR