How to delegate permissions to allow adding/changing e-mail address

[Gaute Bekeng]

Hi,
Can anyone point me in the right direction to how I delegate permissions to
add/change e-mail address on a user? TIA.

Kind regards,
Gaute

 

[Jorge de Almeida Pinto]

if I'm correct you need to delegate read/write permissions on the
"proxyAddresses" attribute

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)
# Jorge de Almeida Pinto #
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx

 

[Gaute Bekeng]

Hi,

Thanks for the suggestion but it did not work. Any other suggestions? TIA.

Regards,
Gaute
"Jorge de Almeida Pinto"

 

[Joe Richards [MVP]]

How do you plan on doing the changing?

 

[Joe Richards [MVP]]

And is this for Exchange?

 

[orgabeke]

Hi,

Sorry for the late response, I've been on vacation.

It is for Exchange and I have created a mmc console for the user to
use. The
user already has permissions to do several other tasks using the mmc
console. So far I've had no success in delegating permissions to
add/edit/delete e-mail addresses.

Kind regards,
Gaute

 

[Joe Richards [MVP]]

When using the GUI you have artificial limitations and requirements put on you
which make it so you often have to delegate more than you should really need to.

If you use a script for instance, you will need to delegate proxyAddresses and
mail. You could start with those and see if the GUI works, if not, you will want
to get a network trace of the LDAP update request and see what else it may be
touching. If you don't see anything the GUI is doing the checking itself and you
will have to either slowly add more delegations or delegate everything necessary
for add user and then back it off until you find the minimum necessary.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net

---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

 

[Gaute Bekeng]

It seems like it might involve more work than the benefit I'll get in
return. Thank you for taking time to answer my question.

Regards,
Gaute