Exchange 2010 (sorry, don't currently have a test environment)
The request is that a userA can modify some of the basic AD properties such as "Telephone Number" of userB. In AD, I was going to setup userA with a "delegation of control" applied to the OU that userB is part of.
I was hoping that this would be enough to allow userA to modify userB's properties through userA's Outlook client accessing the GAL. Will this work? Is that the best approach?
I also see that ECP (or PowerShell) provides a way to create roles that can do this type of work. I also see that you can scope this to a particular OU (which I definitely need). My concern is that I can't control the specific user object properties
that can be modified.
Was might be the best approach? Is there an online example I can use in this case? I've searched Bing and Google and can't seem to get the right search to make sure I'm going in the right direction.
