How users can update their own personal properties in Active Directory

[Ricky]

I wonder if it is possible for users update their personal properties in
Windows 2003 - AD but only the fields i want to/choose.

Can someone give me a tip or script how can this be done?...

Thanks
[]
Ricky
(sorry for so must posts)

 

[Brian Desmond [MVP]]

Yes in fact they already have rights to update a bunch of fields by default.

If you have your users search for themselves via the Start>Search interface
in Windows, they can edit their object.

Go eay on the crossposting

--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services

www.briandesmond.com

 

[Jerold Schulman]

I wonder if it is possible for users update their personal properties in
Windows 2003 - AD but only the fields i want to/choose.

Can someone give me a tip or script how can this be done?...

Thanks
[]
Ricky
(sorry for so must posts)

See tip 10167 » How can I allow users to maintain their own personal information in Active Directory?
in the 'Tips & Tricks' at http://www.jsifaq.com


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com

 

[Ken Aldrich]

Once you delegate the permissions using the delegation wizard or other
means, then you may want to create a nice interface for your users to do
this. Try granting the "self" permission.
Personally I wouldn't want to give all of my users ADUC to make updates.
You can use DSRAZOR for Windows to create a custom UI. You can make the
text say whatever you want, arrange the edit boxes and buttons how you want,
and only include the edit fields you wish. You put this UI into a
stand-alone .exe and share it on your network. Then you can just direct
people to it or push out a shortcut to it on their desktops.

You can see a screenshot of it here:
http://www.myitforum.com/forums/Limit_User_Access_for_AD_Users_&_Computers/m_137141/tm.htm

Or go directly to the product website here:
www.visualclick.com/?source=userdet071906