Shadow, Welcome Shadow. I am new to the list, too.
You should be able to accomplish this with delegations. Right click an OU that has user objects that you want to have your admins maintain, and choose delegate control. The delegation wizard has some common tasks that you can delegate, or you can choose custom tasks to delegate various levels of control of specific attributes. Either way, the result is that the wizard will configure the ACL of the object properties to establish the control you are looking for. You can see the results on the security tab of the object properties. Susan Fosselman EDS - NMCI Messaging / Directory Services Engineer 3970 Sherman Street San Diego, CA 92110 Office: 619-817-3594 email: [EMAIL PROTECTED] -----Original Message----- From: Shadow Roldan [mailto:[EMAIL PROTECTED] Sent: Thursday, October 02, 2003 8:48 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] hello and a question Hi I'm new to the list so excuse me if I come across as a lame-o! We have a win2k environment w/ exchange 2k. There's only one little problem I'm having with active directory, we would like to have our Admins (read administrative assistants, not sys-admins) do the chores of maintaining the active directory user information. i.e, updating a user's business phone, cell phone, address, etc. However, this person cannot have access to change anything else, such as disabling an account, adding an email address etc. I cannot, for the life of me, figure out how to assign permissions just so... Any advice would be greatly appreciated. -- Shadow Roldan IT Manager Zero G Software, Inc. tel: 1-415-512-7771 x306 cell: 1-415-370-3782 mailto: [EMAIL PROTECTED] www.ZeroG.com The leading provider of multi-platform software deployment solutions. -- List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
