delegate a specific attribute

Discussion in 'Active Directory' started by Mike Koch, Oct 10, 2006.

  1. Mike Koch

    Mike Koch Guest

    I want to delegate permission to a specific attribute (telephoneNumber) so
    our phone guy can update AD as new users come and go. I've done similar
    delegations for unlock and password change rights by editing the dssec.dat
    file, but when I found 10 different instances of telephoneNumber within the
    file, and I'm not sure which one to use, or if I need to use more than one. I
    want the phone guy to be able to modify only the telephoneNumber attribute on
    user objects in AD. Can anyone provide a bit of guidance?

    Mike Koch, Oct 10, 2006
    1. Advertisements

  2. The "Telephone Number" field on the "General" tab of user properties in ADUC
    corresponds to the telephoneNumber attribute. If you click on "Other" and
    enter more numbers, these correspond to the multi-valued attribute called
    otherTelephone. These, and all of the other phone number attributes are
    documented in the first spreadsheet at this link:
    Richard Mueller, Oct 10, 2006
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.