Filtering out OU's while using RSAT

hello everyone,

we have a colleague needs able add users groups , able add telephone numbers. needs access 1 ou.

i set testing environment , created testing user. user currectly has access ou's. 

what easiest/safest way deny user access other ou's ? , making properties/add-to-group option available ?

current setup is:

client - win10 + rsat

server: 2012 r2

hi

 you can configure delegate permissions user specific ou.check these articles;

https://technet.microsoft.com/en-us/library/cc732524%28v=ws.11%29.aspx?f=255&mspperror=-2147217396

https://technet.microsoft.com/en-us/library/cc725730(v=ws.10).aspx

but user membership needs in account operators , domain admins , or enterprise admins , or equivalent, minimum required complete procedure.

---

this posting provided no warranties or guarantees,and confers no rights. best regards burak uğur

Windows Server  >  Directory Services