Delegating Control 1

[redwhip]

Hi

I have managed to delegate control to the helpdesk allowing them to reset passwords and disable/ copy accounts using a taskpad.
However they can still double click on the user and view all of the account details.

When I click on the advanced permissions and try to deny them viewing the properties they can't even view the user accounts.
Can anybody help me to stop this from happening while still allowing them to do their tasks?

Thanks

 

[jpederson]

You can get more granular than denying read properties at the general tab in advanced security settings by going to the properties tab and selecting/deselecting specific properties you want the delegates to see. I'm sorry, but I don't know what they specifically need to see to do the work you have outlined above, but it might be worth investigating if you haven't already. Sorry if I am just telling you something you already know.

Good luck!

 

[markdmac]

Hi redwhip,

When delegating, did you select create a custom task to delegate? and then did you select user objects under Only the following objects in the folder?

From there you would want to keep selected General then select Property Specific and under Properties select each of the attributes that you want the help desk to be able to see/do.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[redwhip]

I will try this later. Thanks for the tip.

 

[bran2235]

Does anyone know of any links to specific instructions for creating MMCs? / new taskpad views, etc.??


TIA!
Brandon