Global Address Book

[billberge]

Folks,

My boss would like his admin assistant to be in charge of udating the Global Address Book. I tried to delegate control on the AD object to her but she is still not able to edit any information.

Any ideas on how to make this happen?

Thanks in advance.

 

[WhoKilledKenny]

The GAL is updated automatically. What type of editing does the boss want done? could you be more specific.

Jesse Hamrick

http://www.powershellpro.com

 

[billberge]

We have folks who have moved around from different locations so addresses, phone numbers, and departments have changed. He views IT having to update this as a waste of time and feels an admin assistant is more suited.

 

[WhoKilledKenny]

Well, address, phone numbers, and departments are properties of the user in AD. They are modified via changing the properties in Active Directory Users and Computers. Meaning you need to give the client at least Account Operators (I believe - check if AOs can edit properties). You have to provide a tool, like ADUC MMC, to allow the client to access user objects. If the client is not computer savy, I would create a web form that allows her to make changes only to the properties specified. Other than that I would explain to the boss that it's not a good idea to allow anyone other than the Admins to have access and be able to modify User Accounts.

Jesse Hamrick

http://www.powershellpro.com

 

[58sniper]

Make the users do it:

http://www.directory-update.com/

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP