1

I'm trying to give my bind user account the ability to write to the directReports attribute. When I get into the properties, almost every other attribute has a read and a write option. I only see "Read Direct Reports." No "Write Direct Reports."

This is AD 2003.

I've gone through the Delegate Control wizard and there was a Read and Write Direct Reports. I ticked both of them, tried to write, but still cannot.

Anybody know what's going on and why I can't delegate control to this attribute?

Thanks all!

Improve this question
1
  • Well, it's looking like you can't directly write to it. But still odd you get the option to select it in the delegate control wizard.
    – cluckinchicken
    Apr 25, 2012 at 23:33

1 Answer 1

Reset to default
1

Try using ADSI Edit to modify the ACL for the OU containing the users that you want your bind account to modify. ADSI Edit isn't as simple as the delegation wizard, but it does give you full control.

Another option would be to add your bind user account to the Account Operators security group, although that would allow it to modify all account properties and not just this particular one.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .