Used these steps below to assign delegation but I don't know which ones affect the fields on OWA? RRS feed

  • Question

  • In order to allow user to change certain attribute in AD, the process needs to be configured through delegation of control wizard;

    1. In Active Directory, Right-click on an OU, for example, and then click Delegate Control. It will launch the Delegation of Control Wizard

    Select the users for delegated control

    Create a custom task to delegate 

    Select “Only the following objects in the folder” radio button, then select User objects

    On the Permissions page, select Property-specific. Then select read and write permissions for the attribute you want to control

    2.Click next and finish

    3.Test the delegation of control to see if delegated users are able to change their attributes

    **On the permission page, where it says property specific or general is where it gets a bit hard to figure out which boxes to tick or not to tick if either blocking the field from being used, or if allowing for a field to be used to make changes** e.g allow users to change only their mobile phone and work phone but block everything else.

    and I wish to know how to remove those delegated permission if you no longer want those permissions assigned.

    • Edited by MX1_11 Friday, December 29, 2017 6:17 AM
    Thursday, December 28, 2017 1:37 PM