Group attribute delegation
When you delegate group attributes you do not have the option to specify which group you can give permission to delegate.
Example. I am trying to create a template for our help desk. It will be limited but coincide with their responsibilities. If I delegate the group attribute to the template, then add a help desk person to the template they could then elevate their domain security credentials through the "Modify group attributes of the users" screen.
I need to be able to pick and choose which groups/security accounts I give delegation authority to, not just blanket ability.
Shane Lynch
New to ADSelfService Plus?