non-admins modifying AD user accounts

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I'm trying to find a way to allow a member of our Human
Resources group to modify user account data (phone
numbers, address, office location, etc.) in AD, but I
don't want them to be able to do anything else like delete
entire OUs or something worse. any suggestions?
 
On ou, that holds user accounts rightclick on ou and select delegate
control. Thi gives you the ability to delegate some administrative tasks to
some non admin users.

--

Regards
Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
(e-mail address removed), (e-mail address removed)
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Prevent some Domain Admin Account from creating USERS, Groups, OUs 2
AD permission for admins 3
Limit the Powers of Domain Admin(s) 4
AD design question. 2 Domains vs. 2 OUs 2
School Design for AD 14
Account Operators Group 15
OU Design with single domain AD structure 3
Privelages for Local Security Group Management 2

Back
Top