Office entry on user's General tab

[Carl]

We are trying to delegate permissions to allow a set number of users the
ability to edit fields within active directory. We have been successful in
applying these permissions to all fields listed in ADUC expect for the field
titled "Office" listed on the General Tab of a user account. This field
must have a very unique name within the permissions set of a User object as
we are unable it.

Does anyone know what Read and Write permissions need to be applied to allow
an account to edit this field?

Thanks,
Carl

 

[Simon Geary]

The attribute name for the Office field is physicalDeliveryOfficeName. Set
the appropriate permissions on this.

 

[Carl]

Simon,

Thanks for that info but we are unable to see that in the list of
permissions when either running the Delegation Wizard or from within the
Security tab in ADUC. We can see everything else (ie., Read/Write Title,
Read/Write Telephone Number, Read/Write Street Address, etc...) just not
this field.

I did an LDIFDE export and found the same name for the field as you, but
cannot locate it in the Security tabs.

Any more ideas??

Thanks,
Carl

 

[Simon Geary]

Not all attributes are available by default in ADUC, if the Office attribute
is not their you can make it appear by editing dssec.dat on the DC on which
you have ADUC open. This text file contains a list of all attributes and
determines which ones are available to configure. Once you make the change
as per this kb, you should be able to set permissions on
physicalDeliveryOfficeName. http://support.microsoft.com/?id=296490

 

[Carl]

Simon,

That was the missing link. Thanks for your assistance.

Carl