Allow Select Admin Assistants to Modify GAL? 1

[Fatboy0341]

OK - here's a request I just got handed down by my boss:

Assign permissions that allow 3 non-IT employees to modify ONLY the "Office" and "Phone" fields of anyone listed in the GAL.

Now - I have used the GAL update tool that allows users to update their OWN information in the GAL. I am not sure how you would go about allowing users to modify ANYONE's information in the GAL (I could give them the AD snap-in and rights to do it that way but not sure how to do it through the GAL).

Lastly - even if I could give them those rights - I wouldn't know any way to be able to limit it to only those two fields (Office and Phone).

So - my questions:

1) Is it possible to allow a select group of people to modify user information using the GAL?
2) If so - is it possible to limit what fields they can change?

Let me know what you think. In theory - what they are asking for would be a great feature and helpful to have. I'm just not sure it exists.


"He who laughs last probably made a backup. He who laughs loudest probably hasn't checked his backups in a while."

 

[58sniper]

Directory Update (

http://www.directory-update.com/)

allows you to specify what fields individual users can change.

Directory Manager (

http://www.directory-update.com/Active_Directory_Manager_Overview.aspx)

allows you to specify which users can update other users' info.

Both work great.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP

 

[Fatboy0341]

Awesome...thanks Sniper.

Your prior/current military service? If so...glad to hear from a fellow service member...especially a trigger-puller like me.

JB


"He who laughs last probably made a backup. He who laughs loudest probably hasn't checked his backups in a while."

 

[Fatboy0341]

Quick question - am I correct in assuming that this can only be done via 3rd party software (in other words - not by simply assigning certain rights to a few users)?


"He who laughs last probably made a backup. He who laughs loudest probably hasn't checked his backups in a while."