1
vote
1answer
70 views

How can I delegate “Attributes 1-15” in Exchange / AD?

The following attributes are present on an Exchange user, and this is what my colleague sees: (notice the locks) How can I properly delegate Read access (or Read write if it must be) to these ...
5
votes
1answer
185 views

Different ACLs on two OU's with same “protect object from deletion” setting

Background After I configured our Active Directory so that the ability to move computers was delegated to helpdesk staff, I started hearing reports that computers would get "stuck" in specific OU's. ...
0
votes
1answer
71 views

Set Country / Region field Access via Active Directory Delegation

After creating a security group for special permissions (edit User Objects fields like Street, ZIP etc.) I have a problem of not being able to delegate permission for the field "Country/Region" on a ...
1
vote
1answer
192 views

Difference between “Descendant User Objects” and just “User Objects”

i am trying to delegate permissions on a cetain OU to a certain group. All i find is "Descendatn User Objects" and not just "User Objects" ; we have those available in other domain; please do let me ...
0
votes
3answers
1k views

How can I add a custom Powershell CMDLET to Exchange 2010?

I remember reading about how it's possible to add scripts or commandlets to Exchange 2010... in a way that as soon as Powershell imports the remote commands, your custom command is available as well. ...
0
votes
1answer
225 views

How do I get a list of users in AD who have the ability to reset another user's password?

I need to provide a list of all the users who can reset other users' passwords. e.g. Service Desk Staff, Domain Admins etc. This might have been delegated at a specific OU or at domain level. Is ...
0
votes
2answers
114 views

Permissions, rights, roles, user groups, delegations [closed]

I am looking for a good book, Internet resource that can clearly explain these terms. Really, I would not like to read any Microsoft books or any book about windows or other operation systems. I ...
5
votes
3answers
2k views

Delegating account unlock rights in AD

I'm trying to delegate the rights to unlock user accounts in our Active Directory domain. This should be easy, and I've done it before... but every time the user tries to unlock an account (using the ...