Mooooo. ;) I can't say that's as easy as you might want it to be, but I think it's a good idea to understand the full requirement of what exactly these admins should and should not be able to do on these user objects. Can you expand that requirement a little?
Al -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Centenni, Jason Sent: Tuesday, September 28, 2004 11:17 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] How to take away the password never expirers check box right? Ok, first time poster long time lurker. Here's my question. How do I make it so a OU admin (Each OU has a group acl'd to full control of user objects/computer objects etc inside that OU) so that they can't check the Password never expirers check box? I would like if possible to JUST take away the right for hem to use that check box in the MMC. //jason List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
