You can scope the MMC by OU but not tab. If you delegate things it will only show textboxes as writeable when you grant access to the attribute.
To do what you want, goto View>Advanced Features then create a group for the delegation and put the receptionist in it. Goto Properties>Security of the OU (or domain) containing the users you want to grant access to. Grant them write property on the relevant attributes (e.g. telephoneNumber, facsimileNumber, mobile, etc) on the user class. Thanks, Brian Desmond [email protected]<mailto:[email protected]> c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian From: David Lum [mailto:[email protected]] Sent: Wednesday, December 02, 2009 4:47 PM To: NT System Admin Issues Subject: RE: AD users and computers rDirectory (not free though) and delegation. Not fan of ADUC MMC on Joe User machine, although there is probably a way to restrict the MMC from displaying everything. David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 From: Steve Ens [mailto:[email protected]] Sent: Wednesday, December 02, 2009 2:45 PM To: NT System Admin Issues Subject: AD users and computers I need to allow a receptionist the ability to add information like phone numbers, extensions, etc to AD. What's the easiest way? Install the adminpak on the station? I am drawing a blank as to where I give permissions to the individual. Any assistance appreciated. I don't want her to do any damage... ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
