Enabling user to enter addresses in AD and nothing else

[Denis]

I was wondering if anyone knows a way for a specific user
to be able to enter in personal information ie. phone
numbers and addresses of employees into Active Directory
without giving them access to any other objects in AD.

Thank you in advance.
Denis

 

[Steven L Umbach]

You can do that with delegation which basically is a wizard to give user/group
advanced permissions to a container. You could create an OU for that user to manage
with the specified users in it. Then right click OU and select delegation to start
the wizard. You will probably want to select create a custom task, just the user
object, and then select general and property specific permissions to choose
om. --- Steve

 

[Guest]

Thanks for the advise.

Den

-----Original Message-----
You can do that with delegation which basically is a wizard to give user/group
advanced permissions to a container. You could create an OU for that user to manage
with the specified users in it. Then right click OU and select delegation to start
the wizard. You will probably want to select create a custom task, just the user
object, and then select general and property specific permissions to choose
om. --- Steve





.