Delegate rights to change User Attributes

[Robbin M]

Hi, at office I’m the administrator of Windows Server 2003 DC. Due to some security reasons we need to delegate permissions to a particular Active Directory Security group so that they can change users attributes. These attributes includes users Firt name, initials, last name, display name, description, ect. In short they must be able to change every field provided in the general tab. Now the problem am facing is I’m not able to find these fields anywhere in the AD Users and Computers Delegation Wizard.

Any idea what is wrong with my system or am I making any mistake? All suggestions appreciated.

[KOVID]

I dont think there would be any anything wrong with your system, nor with you. Here is the proper process for doing the same. When you in to the Delegation of Control wizard, check the "Create a custom task to
delegate" option.

Once done, use the option "Only the following objects in the folder" with "user objects" specified. When you get to the next screen you can simply choose what attributes and permissions you want to apply.

Just make sure that "Property-specific" is used. It'll show you attributes on the user object.

[SMichael]

Just checkout this Microsoft KB Article describing: How to Delegate Basic Server Administration to Junior Administrators. support.microsoft.com/kb/555986