Group attribute delegation

Group attribute delegation

When you delegate group attributes you do not have the option to specify which group you can give permission to delegate.

Example. I am trying to create a template for our help desk. It will be limited but coincide with their responsibilities. If I delegate the group attribute to the template, then add a help desk person to the template they could then elevate their domain security credentials through the "Modify group attributes of the users" screen.

I need to be able to pick and choose which groups/security accounts I give delegation authority to, not just blanket ability.

Shane Lynch





                  New to ADSelfService Plus?