AD account for password change:
Create a basic domain account with
no addtional privs
Use Delegate control wizard from within ADUC
 User
objects
 Reset password
 Write lockoutTime (if unlock is enabled)
 Write
shadowlastchange

Shannon 

On 2013-07-19 10:41, Clément OUDOT wrote:


> 2013/7/19 Peter Klingler <[email protected]>:
> 
>>
If you delegate rights to an AD user, what are the minimum permissions
needed?
> 
> I always use a domain adminsitrator account, never had the
time to
> search the minimal requirement for this account.
> 
>> What
directory rights to you set in Apache and on the local file system?
> 
>
Never tuned that, this is a simple PHP application. Just let Apache
>
read the PHP files.
> 
> Clément.
>
_______________________________________________
> ltb-users mailing
list
> [email protected]
>
http://lists.ltb-project.org/listinfo/ltb-users [1]




Links:
------
[1] http://lists.ltb-project.org/listinfo/ltb-users
_______________________________________________
ltb-users mailing list
[email protected]
http://lists.ltb-project.org/listinfo/ltb-users

Reply via email to