Re: Account question

From: Kevin Sullivan (ksullivan_at_NOSPAM.aelita.com)
Date: 05/07/03 

Date: Wed, 7 May 2003 16:46:50 -0400

pretty straight ahead. If I delegate the ability to write to the phone
number attribute in AD (maybe to users in a specific OUs) and I delegate
this right to SELF then,

I log on as aelita\ksullivan
and I can write to the phone number attribute of the aelita\ksullivan
account and nothing else.

The currently logged on user can access the attributes of thier own user
object that have been delegated. Once you test it it make total sense...

Kevin

"Victor Matei" <rvf@bebe.moc> wrote in message
news:uZtfmgMFDHA.1548@TK2MSFTNGP12.phx.gbl...
> Can anyone point to a more exhaustive description and explanation of the
> "SELF" account in AD ?
> And an example how this is supposed to be used properly ?
> Thanks in advance.
>
>

Relevant Pages

  • Re: Password Reset
    ... you can use the Delegation of Control wizard on a domain ... or OU to delegate the ability to reset passwords - right-click on the domain ... Delegating the ability to force the user to change their password on next ... > in my office that needs the ability to reset passwords on the network. ...
    (microsoft.public.windows.server.general)
  • Re: Clinton: Desperate Much?
    ... touting her ability to "work instead of give speaches" is somewhat ... You can tell by the way she didn't know about Texas' delegate ... *Somewhat understandable, given the realities of campaign finance, ...
    (rec.sport.football.college)
  • Re: "Write-once" directory permissions
    ... this ability to delegate is one of the significant features ... delegating that ability to users, ... it comes to the desktop icons - they've left out little things I use ... So now I run a batchfile to dump the particular ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Delegate Control of user objects
    ... > to edit a user's address, company, office, phone number and other ... > creating a custom task to delegate but I'm not too sure which objects I ... through the attributes of that useraccount and note which attributes ...
    (microsoft.public.windows.server.active_directory)
  • Re: delete the ability to move computers from one OU to another
    ... > Blake wrote: ... >> We would like to delegate the ability for our field people the ability ... >> move computer accounts from the default Computers container to our OU ...
    (microsoft.public.win2000.active_directory)