some attribute in AD Delegation Wizard not available


  • Hallo,

    I am trying to delegate user contact information changing for some security group.

    Environment: Server 2008 R2

    1. I created Global security group for users who should change users contact information.

    2. Now On Users OU I run Delegation Wizard.

    3. I added created security group, created I custom delegation task, tick "only the following objects in the folder", then selected "User Objects"

    4. In this list I cannot found otherTelephone and wWWHomePage attributes.

    Like explain in somethere in this forum I found C:\windows\system32\dssec.dat file on DC, and there, near this attributes I changed value from 7 to 0 and restart AD console. Nothing was changed. I still cannot see this attributes in delegation wizard.

    In AD schema editor I see this:

    In delegation wizard I found that this attributes in "computers policy objects", but not in "user objects" why?

    Can you explain this?

    • Edited by DimiKo Thursday, November 29, 2012 10:28 AM
    Thursday, November 29, 2012 9:58 AM


All replies