, but
perhaps we could.
~Eric
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Sunday, March 28, 2004 8:16 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] permissions to only disable an AD user account
Actually I was thinking of the msds
]
Subject: RE: [ActiveDir] permissions to only disable an AD user account
So long as we can agree that you'll either have an inconsistent admin
experience or a functional level dependency, that'll work, although I
wouldn't like it as much as some other options. ;)
Here's an option I like: tie
_
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes,
Michael M.
Sent: Friday, March 26, 2004 4:00 PM
To: Active Directory Mailing List (E-mail)
Subject: [ActiveDir] permissions to only disable an AD user account
PROTECTED]
Subject: RE: [ActiveDir] permissions to only disable an AD user account
Hi Rick,
Thanks for the feedback! That's exactly what I thought would happen but
I needed an expert's view! I was thinking instead I could achieve roughly
the same affect by giving the group read/write access
12:29 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] permissions to only disable an AD user account
Mike,
I haven't tested this out, but I suppose that one could do as you suggest
and run a script similar to the following:
Dim User
Dim UserName
Dim UserDomain
Dim AccountExpirationDate
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] permissions to only disable an AD user account
Cute solution to an MS Generated issue. Yes, MS, you shouldn't have put
everything into useraccountcontrol attribute like that... That should
have
been a generated attribute (or something else if you still
: RE: [ActiveDir] permissions to only disable an AD user account
While I (personally, speaking in a position of no power over this) tend to
agree that userAccountControl should be many attributes (IMHO anyway for
Joe's reason as well as others not cited in this thread), the concept of
having
I hope there is an
easy answer to the following question: I would like to delegate authority to a
group to be able to disable user accounts down in an OU. But I don't want
to have to also give them the ability to create/delete user accounts. I've
looked around the Delegation Wizard custom
