Can I grant permission to write in specific attributes using security groups

Question

Hi
I Created GPO that write the computer name in the one of the user attribute "comment attribute " when  he logged on
then i went to OU and grant self delegate permissions to allow the users of that OU to write on "comment attribute
but this did not work for the users how have been disabled form inheritance
so instead of grant delegate permissions to the OU
Can I grant permission to write in specific attribute "comment attribute " using security groups "Domain User "??

Answer 1

Hi,
Open Active Directory Users and Computers.
On the View menu, select Advanced Features.
Right-click the object for which you want to assign, change, or remove permissions, and then click Properties.
On the Security tab, click Advanced to view all of the permission entries that exist for the object.
To assign new permissions on an object or attribute, click Add.
Type the name of the group, computer, or user that you want to add, and then clickOK.
In the Permission Entry for ObjectName dialog
box, on the Object and Properties tabs,
select or clear the Allow or Deny check
boxes, as appropriate.
http://technet.microsoft.com/en-us/library/cc757520(v=ws.10).aspx
Regards,
Rafic
If you found this post helpful, please give it a "Helpful" vote.
If it answered your question, remember to mark it as an "Answer".
This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing!