I am running Server 2008 R2 in an Active Directory Domain Environment.
I have created a group in Active Directory and I have delegated management authority to that group to a user.
I want this user to be able to solely just have rights to amend amend data in a specific OU and when using Active Directory Administrative centre can only view organisation section without having the ability to add sections ?
They have Active Directory Administrative centre installed on their Windows 7 64bit PC.
I do not want to provide them with any level of Administrative rights except the minimum required for them to have the ability to update all data under organisation, for example Job Title, Company and department fields etc.