- Best way for users to edit their AD entries?
- Posted by BenF on March 3rd, 2004
Everyone recommend this be like a help desk ticket type of thing and
have it controlled by the admins? Or is there a way to delegate users
the permission to edit certain fields in their contact info? Ideally
people would want to be able to easily change their email, phone#,
mobile#, display name.... who knows how often.
If i go to ...
Start --> Search --> For People
Then select Active Directory and seach for myself I can pull up my
entry but most fields are greyed out for editting. How do you adjust
this? Or anyone know a good web based way to do this? Maybe a third
party product?
- Posted by Chriss3 on March 3rd, 2004
Hi BenF!
You can use the Delegate Of Control Wizard at the Domain node and Delegate
Control for the DYNAMICAL Account SELF, As you have found out SELF are by
default granted access to write few attributes. With in the Delegate Of
Control Wizard you can chose the fields to fit your needs with customized
permission.
Step-by-Step Guide to Using the Delegation of Control Wizard
http://www.microsoft.com/windows2000...delegsteps.asp
The best way I know of to let users edit there own attributes such in your
case are to let them do this by browse the Directory from My Network Places,
Directory doesn't appears in My Network Places by default since Windows XP,
But this can be enabled.
329495 - The Directory Icon in Entire Network in My Network Places Is
Missing
http://support.microsoft.com/default...b;en-us;329495
I'm wish you good luck.
--
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
"BenF" <noemail@nothx.com> skrev i meddelandet
news:f9pc40tk5hcog1d0hpe10vnqmsnmedcv17@4ax.com...
- Posted by BenF on March 4th, 2004
Cool, I actually tried exactly what you mentioned but was afraid of
messing something up so stopped half way through. I assumed that Self
group would be the right one. Thanks for all your help!
-BenF
On Thu, 4 Mar 2004 01:32:25 +0100, "Chriss3" <noSpamHere@chrisse.se>
wrote:
