More rights to users.....

[Dooma]

I just finished migrating from NT to 2000 AD. Everything is working fine. I
want users to update their personal information in AD but it only allow them
to add a phone number and address. What should I do to let them enter their
first and last name since some of the users do not have that?

Thanks,

 

[Cary Shultz [A.D. MVP]]

Dooma,

How many users are we talking about? I ask because you could do this with
ldifde....

Cary

 

[Tim Hines [MSFT]]

You will need to modify the permissions on the attributes that you want the
user to be able to edit. To do this for one user, select the properties,
select the security tab, click advanced, click add and add the user that
should be able to modify the properties, click the properties tab and select
allow for the properties that the user should be able to edit.

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Dooma]

I have around 100 users.

Dooma,

How many users are we talking about? I ask because you could do this with
ldifde....

Cary

fine.

 

[Dooma]

If I want the user to be able to fill more information in their user name
container in active directory, where do I need to go to give them more
rights?

 

[Cary Shultz [A.D. MVP]]

Sorry, Dooma!

I read this post completely wrong. You want to allow your users to make
changes ( I read: you, the Admin, making the changes ). ldifde would not
help you to help them! Sorry!

I would look at what Tim suggested.

However, I would like to take this opportunity to introduce you to ADModify,
though. This is a tool that allows you to make the same change ( for
example, the address fields ) to all of the user account objects that you
select. So, if when you create the user account objects you do not include
the Company name, the street address information and the company telephone
number instead of going to each of your 100 users' account properties and
manually entering in the same information you could use ldifde ( like I
suggested in my initial response ) or ADModify. Both are really wonderful
tools if you can not script.

Again, sorry for the incorrect response. Completely read your post
incorrectly.

Cary