I created a security group and in our main Users OU save them modify permissions to just the fields necessary - probably the same fields you're looking at. Note that in ADUC what's listed as "State/Providence" is listed as simply "st" when you are looking at allowing permissions...
FWIW aw use rDirectory (www.namescape.com<http://www.namescape.com>) to allow non-IT staff maintain some of their own AD data and the group/perms I created above is what determines what the users can edit. Dave Lum - Systems Engineer 971-222-1025 Northwest Evaluation Association - www.nwea.org From: Kevan Dickinson [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 19, 2008 8:01 AM To: NT System Admin Issues Subject: Update information in Active Directory Hi I need to give someone permission to just modify user details such as Office, Address, Phone number etc in Active directory. Looking at delegating Permissions seems to give them to much access as they can create, delete and modify accounts. I really only need modify. What is the best way to achieve my objective? Regards Kevan Kevan Dickinson Network Manager NSF-CMI 23 Lodge Road Hanborough Business Park, Long Hanborough, Oxford, OX29 8SJ, UK T:+44 01993 885661 E:[EMAIL PROTECTED] W:www.nsf-cmi.com ******************************************************************************** ***Disclaimer*** The contents of this Email may be privileged and are confidential. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Should you wish to use Email as a mode of communication, NSF-CMi Ltd and its subsidiaries are unable to guarantee the security of Email content outside of our own computer systems. This footnote also confirms that this Email message has been checked by MailMarshal for the presence of computer viruses. Whilst we run anti-virus software, you are solely responsible for ensuring that any Email or attachment you receive is virus free. We disclaim any liability for any damage you suffer as a consequence of receiving any virus. NSF-CMi Ltd Registered in England No: 1899857 Registered Office 4th Floor, 35 New Bridge Street, London, EC4V 6BW ********************************************************************************** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
