User attributes question

[Philip Nunn]

If I want to enable a security group to be able to disable user accounts in
AD, what user object attribute do I need to allow the group to change so
they have permissions to disable users? thanks in advance!

Phil Nunn

 

[Guest]

This article may help:

http://www.microsoft.com/WINDOWS200...ios/ou_delegate_admin_authority_secgroups.asp


Cheers,

John Powell

 

[Joe Richards [MVP]]

They have to have write access to userAccountControl. Note that will give
additional capabilities. Do a google search for useraccountcontrol and
enumeration and look at flag enumeration of that attribute.

joe