User attributes question

  • Thread starter Thread starter Philip Nunn
  • Start date Start date
P

Philip Nunn

If I want to enable a security group to be able to disable user accounts in
AD, what user object attribute do I need to allow the group to change so
they have permissions to disable users? thanks in advance!

Phil Nunn
 
They have to have write access to userAccountControl. Note that will give
additional capabilities. Do a google search for useraccountcontrol and
enumeration and look at flag enumeration of that attribute.

joe
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Question on reconciling members and memberof attributes 3
Dsquery/Dsmod 1
Update attribute in AD for all users 7
How to deny a read access to an object's attribute in AD 0
"Access Denied" when trying to update attribute on Domain Admin user. 1
List AD attributes? 3
user-comment attribute - how to give user permission to update? 14
attribute for disabled account 3

Back
Top