For a crude approach (in my mind, not too practical to support), you can do this via the XP Search dialogue; open Search, pick "printers, computers, or people", then "people in your address book". In the "Find people" dialogue, select "Active Directory" as your source, then enter the group name in the "Name:" field as your search criteria. When the group is returned in the search results, assuming the manager can update membership list is properly set, you can add/delete members through the "Properties" General tab.
Yes, the search will return groups, and no, they don't have to be mail-enabled, assuming you set "Active Directory" in the search scope and not "Address Book".
As I said, not to practical to support, but it is possible without any 3rd party components.
Andy Schan
Titus International, Inc.
From: "Lucas, Bryan" <[EMAIL PROTECTED]>
Reply-To: [email protected]
To: <[email protected]>
Subject: [ActiveDir] Allowing users to manage security groups
Date: Fri, 7 Apr 2006 13:33:26 -0500
The manager can update membership list is great, but how does a user do that for a security group? For a Distribution Group, they can use Outlook, but I dont want to hand over the ADUC mmc snap-in to my users to manage security groups.
Does anyone have any recommendations on 3rd party products that allow a very controlled self-service, either through web or actual client? What about any public ASP that does this?
Thanks,
Bryan Lucas
Server Administrator
Texas Christian University
(817) 257-6971
