RE: Prevent HelpDesk from changing user Phone numbers (UNCLASSIFIED)

2011-02-10 Thread Kent, Larry CTR US USA
Classification: UNCLASSIFIED
Caveats: NONE

Steve:

 

Thanks.  I never saw that because I never clicked on the properties
tab...what a maroon I am

 

Larry

 

From: Koivisto, Steve [mailto:steve.koivi...@rosedmi.com] 
Sent: Wednesday, February 09, 2011 4:41 PM
To: MS-Exchange Admin Issues
Subject: RE: Prevent HelpDesk from changing user Phone numbers
(UNCLASSIFIED)

 

Larry,

 

At the OU/Domain level, you need to modify the advanced security
settings for the attributes you want to deny modification to:

 

 

 

-Original Message-
From: Kent, Larry CTR US USA [mailto:larry.k...@us.army.mil] 
Sent: Wednesday, February 09, 2011 2:24 PM
To: MS-Exchange Admin Issues
Subject: Prevent HelpDesk from changing user Phone numbers
(UNCLASSIFIED)

 

Classification: UNCLASSIFIED

Caveats: NONE

 

All:

 

I probably should know how to do this.  Exchange 2003. We allow our help
desk people to unlock accounts, change passwords ,etc. All was done by
delegating control. I would like to be able to prevent them from
changing the user's telephone number. Under delegate Control in ADUC in
the create a custom task to delegate, I've checked only user objects in
the 'only the following objects in the folder' and for property specific
permissions I've only checked Read, Read All Properties, Change
password, and Reset password. Read and write phone and mail options is
NOT checked.  Any suggestions will be greatly appreciated.  Thanks. 

 

Larry

Classification: UNCLASSIFIED

Caveats: NONE

 

 

 

---

To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
blockedhttp://lyris.sunbelt-software.com/read/my_forums/ 

or send an email to listmana...@lyris.sunbeltsoftware.com
blockedmailto:listmana...@lyris.sunbeltsoftware.com 

with the body: unsubscribe exchangelist

 

 

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
blockedhttp://lyris.sunbelt-software.com/read/my_forums/ 
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Classification: UNCLASSIFIED
Caveats: NONE


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelistimage001.png

RE: Prevent HelpDesk from changing user Phone numbers (UNCLASSIFIED)

2011-02-09 Thread Koivisto, Steve
Larry,



At the OU/Domain level, you need to modify the advanced security settings for 
the attributes you want to deny modification to:



[cid:image001.png@01CBC86F.CD6E8B10]



-Original Message-
From: Kent, Larry CTR US USA [mailto:larry.k...@us.army.mil]
Sent: Wednesday, February 09, 2011 2:24 PM
To: MS-Exchange Admin Issues
Subject: Prevent HelpDesk from changing user Phone numbers (UNCLASSIFIED)



Classification: UNCLASSIFIED

Caveats: NONE



All:



I probably should know how to do this.  Exchange 2003. We allow our help desk 
people to unlock accounts, change passwords ,etc. All was done by delegating 
control. I would like to be able to prevent them from changing the user's 
telephone number. Under delegate Control in ADUC in the create a custom task to 
delegate, I've checked only user objects in the 'only the following objects in 
the folder' and for property specific permissions I've only checked Read, Read 
All Properties, Change password, and Reset password. Read and write phone and 
mail options is NOT checked.  Any suggestions will be greatly appreciated.  
Thanks.



Larry

Classification: UNCLASSIFIED

Caveats: NONE







---

To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe exchangelist





---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelistinline: image001.png