Delegate control question

I need help delegating control in order to modify the e-mail field of a users properties. When a user doesn't have access, the field is grayed out and they are unable to highlight it. I tried Read/Write, but that doesn't seem to do anything. I went Advanced
and didn't see anything specific that could trigger it. Anyone have any ideas?

It's a hidden attribute. You could use a third party LDAP reader to easily expose it, such as freeware Apache Direcotry Studio. You can simply right-click in the attribute list, and add it, and it will show up.
We use it in a 27k Office 365 mailbox environment and once in awhile pulling up hidden attributes on the fly. Works like a charm.
http://directory.apache.org/studio/
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.
I'll give this a shot. Thanks!
FYI,
I checked this out in ADSI Edit. If you need to, and if this is just a permission you have to change for one or two folks, you can do it in here.
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.
I don't see that option at all. I've edited the dssec.dat file in both system32 and syswow64 on the domain controller and restarted ADUC and don't see it.
I am trying to provide a user group this control and delegating the control to the domain. Does it have to be done on specific OU's?
Domain functional level is only 2003. Could this be the reason?
I've tried to mess around with Apache Directory Studio but am lost in where to find this hidden attribute.
What is needed is to select User Objects and then the property/specific attribute will be there.

Similar Messages

Question about Delegate Control to Desktop Support

I am working on delegating control to a newly formed/reclassified position in my company. This role will primarily provide Desktop Support. They will have little to no need to log into servers.
I have already gave them admin rights to the end users machines, now I just need to grant them the proper rights in ADUC/Exchange so they can properly perform their role.
Here is what they will need to do:
User account lifecycle management (Create, change, delete, change password, etc)
Computer account lifecycle management (Create, change, delete)
Security & Distribution Group membership management (Create, change, delete)
Exchange mailbox creation (Exchange Recipient Administrators)
Run RSOP for GPO
Basically, I want them to have full control over user, computer and group objects. This way they can create users, change group memberships, add computers to domain, delete computer objects, etc.
The problem I am having, I am not sure what rights I need to grant them via the delegate control wizard to accomplish all of that. I know I could just grant them "Full Control" of the OU structure containing all of our user, computer and group
objects, but would like to avoid that unless its really what I need to do in the end.
Any assistance would be appreciated!
Thanks!

I would not recommend providing Full control over user, computer and group objects. Provide permission based on the tasks that they need to perform. The following articles
should help you:
User/computer/Add remove members to Groups Delegation
http://kpytko.pl/2012/05/16/active-directory-rights-delegation-overview/
http://kpytko.pl/2012/05/26/active-directory-rights-delegation-part-2/
http://social.technet.microsoft.com/wiki/contents/articles/6477.how-to-view-or-delete-active-directory-delegated-permissions.aspx
Exchange Mailbox Delegation :
http://blogs.technet.com/b/matabra/archive/2011/09/16/how-to-create-a-custom-recipient-management-group-using-exchange-2010-rbac.aspx
Run RSOP for GPO Delegation:
http://technet.microsoft.com/en-us/library/cc758756(v=ws.10).aspx

Issue in custom delegate control

hi
am creating a custom delegate control with controlid ="AdditionalPageHead" . i deployed and activated as a site collection feature.
but i am not sure how to see the activated control/ how to see this control in action.
below is my code:
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using Microsoft.SharePoint;
using Microsoft.SharePoint.Administration;
using Microsoft.SharePoint.Utilities;
using Microsoft.SharePoint.Diagnostics;
namespace OPUserDispName
public class EcmaScriptDelegateControl :WebControl
protected override void OnLoad(EventArgs e)
base.OnLoad(e);
string helloAlert = "alert('Hello, world!');";
this.Page.ClientScript.RegisterClientScriptBlock(this.GetType(), "popup", helloAlert, true);
// if(!HttpContext.Current.User.Identity.IsAuthenticated)
// return;
// SPUser user = //SPContext.Current.Web.EnsureUser("i:0#.f|OPMembership|OPAdmin");
// user.Name = "OPAdmin";
// user.Update();
in my elements.xml file of my module :
<?xml version="1.0" encoding="utf-8"?>
<Elements xmlns="http://schemas.microsoft.com/sharepoint/">
<Control Id="AdditionalPageHead" ControlAssembly="OPUserDispName, Version=1.0.0.0, Culture=neutral, PublicKeyToken=467af93481413beb" ControlClass="OPUserDispName.EcmaScriptDelegateControl"
></Control>
</Elements>
here i wanna see alert when the activated/or page load happened.
may i know, how to see this, in working. as per the current scenario, am unable to see any output even after feature activation.
do i need to do any settings in master page? do i need to perform any changes in web.config.
help is appreciated!

This has complete solution.
http://www.codeproject.com/Articles/113704/SharePoint-Master-Page-Customizations-Through
can you try RegisterStartupScript instead
of RegisterClientScriptBlock?
Bala

Delegate Control in the masterpage viewable in a single web page?

Hi,
I am working on a emergency banner that will appear across all site collections' root website of a SharePoint Web Application using delegate control on the masterpage and user control on a feature. I was wondering if there is a way to restrict
the delegate/user control to activate only on a single webpage of a website.
For example:
I want the emergency banner to appear on the welcome page (e.g.
http://mywebapp.com/sites/SiteA/Pages/default.aspx), but not in Site Settings/Contents (e.g.
http://mywebapp.com/sites/SiteA/_layouts/15/viewlsts.aspx)
Any help is greatly appreciated.

ok, then try only second part: create feature of Web scope with Control element and activate it only on particular sites. Did you try it?
Another option is to change logic of control itself: e.g. it may check some value in property bag of current SPWeb (e.g. ShowControl = true), and if it contains this flag, control will be rendered, if not just set this.IsVisible = false. I.e. you will be
able to control on what sites to show the control via property bag.
Blog - http://sadomovalex.blogspot.com
Dynamic CAML queries via C# - http://camlex.codeplex.com

Delegate Control of an OU

how do i Delegate control for an OU so that members of a group that has been delegated control and move computer objects from one OU to another?
I can delegate control for users and groups but can't seem to be able to delegate control of computers in a way that allows me give admins rights to move them from OU to OU
Systems is Windows Server 2008 Active Directory.paddy ryan

Hi,
You can use the following steps to grant a group to control the two OUs. Then, members in this group could move computer objects between these two OUs.
1. In ADUC, right click the first OU and select Delegate Control.
2. Add the group you want.
3. Select the "Create a custom task to delegate" option and click Next.
4. Select "Only the following objects in the folder".
5. Check the box before "Computer objects" in the list.
6. Check the box before "Create selected objects in this folder" and "Delete selected objects in this folder". Click Next.
7. Check the box for "Write".
8. Click Next and Finish.
9. Perform the same steps on another OU.
After that, members in the group could move computer objects between these two OUs.
If anything is unclear, please let me know.
Regards,
Bruce

Delegate Control on OU for Non-Admins

Hello. I have an OU for a remote office. There is a local IT person who is able to join computers to the domain and manage the OU. I created a security group and this person is in this group. I have given the delegate control permission to this group and
everything is working fine. The IT person can join computers to the domain and do other things in the OU. The issue is that a new IT person has joined the team in that remote office and he needs the same rights. I added him to the security group but for some
reason he cannot join computers to the domain. He gets an access denied error. What am I missing??
Asif Shah

Hello. I have an OU for a remote office. There is a local IT person who is able to join computers to the domain and manage the OU. I created a security group and this person is in this group. I have given the delegate control permission to this
group and everything is working fine. The IT person can join computers to the domain and do other things in the OU. The issue is that a new IT person has joined the team in that remote office and he needs the same rights. I added him to the security group
but for some reason he cannot join computers to the domain. He gets an access denied error. What am I missing?
In addition check the user membership in other groups. Maybe he has Deny access somewhere in the domain.
Mahdi Tehrani |
|
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

Controle questions forgot

I need to know how i can find the answer on my control questions ? Anyone ?

I assume you mean your apple ID security questions, correct?
First, did you have a recover/rescue email set up? If so, go to appleid.apple.com on a computer or mac and sign in and go to security and passwords... from there you can have your security questions reset... if you didn't have a rescue/recovery email set up then you'll need to contact apple support to have them reset. They will transfer you to account security where they will verify some info and help you... good luck!

Delegate Control - Add/Remove Computers

We are looking at a way to delegate control to our client services group so that they can add and remove computers from the domain. I am not seeing this in the available options. We'll be applying this to certain OU's within the domain to ensure
they cannot remove critical server accidentally such as a DC. Ideas or links are appreciated.
Thanks!

These articles cover delegating these rights to users. In general delegating these rigths creates issues because the user that created the object is given full control, and therefore they can do things other users can't. Moving an object requires
special rights in the source and target OU, while managing all computers in multiple OUs requires additional rights.
How to allow specific users to add workstations to the domain
http://networkadminkb.com/kb/Knowledge%20Base/ActiveDirectory/How%20to%20allow%20specific%20users%20to%20add%20workstations%20to%20the%20domain.aspx
How to overcome issues related to specific users adding workstations to the domain
http://networkadminkb.com/kb/Knowledge%20Base/ActiveDirectory/How%20to%20overcome%20issues%20related%20to%20specific%20users%20adding%20workstations%20to%20the%20domain.aspx
How to allow users to fully manage Computer objects in an OU
http://networkadminkb.com/kb/Knowledge%20Base/ActiveDirectory/How%20to%20allow%20users%20to%20fully%20manage%20Computer%20objects%20in%20an%20OU.aspx
How to allow users to move computer objects between OUs
http://networkadminkb.com/kb/Knowledge%20Base/ActiveDirectory/How%20to%20allow%20users%20to%20move%20computer%20objects%20between%20OUs.aspx

Delegate Control (AdditionalPageHead) rendering...but when?

Hi,
can someone tell when a Delegate Control (AdditionalPageHead) is rendering?

It renders in the Initialization Page Lifecycle event,
In the v4.master page, in the additonal head place holder, there is a delegate control, literally SharePoint:Delegatecontrol... etc defined in the markup. it has an ID of AdditionalPageHead.
When the delegate control loads in the Initialization lifecycle event, it goes through the Features folder in the 14 hive and looks for Element.xml files that define <Control.. nodes.
If the control nodes ControlID is set to AdditionalPageHead, the delegate caches them, and then initializes the control the Control node references in the order of their
Sequence. The control node with the lowest Sequence gets initialized first.
Any control loaded via that delegate control should be available in a child controls CreateChildControls method, assuming you did base.CreateChildControls() first. Any script output in an ascx control loaded by that delegate control should render in the
page head of a page at the end of the page head. The delegate control is declared after the ootb sharepoint scrip and css includes, so anything you deploy to that delegate control should have all the ootb javascript available and you can use ExecuteOrDelayUntilScriptLoaded
to wait for a sharepoint java api to finish loading (they load dynamically).
Additionally, if you need a control to load in a delegate control someplace else, you can edit the master page for a site and add your own delegate control place holder.
My Blog: http://www.thesug.org/Blogs/ryan_mann1/default.aspx Website: Under Construction

I forgot answers from a control question, what do I do?

I forgot answers from a control question, what do I do?

Reset Your Security Questions: http://support.apple.com/kb/ht5312
Navigate to My Apple ID using your web browser.
Click "Manage your account"
When prompted, sign in using your Apple ID and password.
Click Password & Security
You'll be asked to answer 2 of your 3 security questions before you can make any modifications. If you are unable to remember your answers, you can choose to send an email to your rescue email to reset your security questions.
Note: The option to send an email to reset your security questions and answers will not be available if a rescue email address is not provided. You will need to contact iTunes Store support in order to do so.

I forgot answer for control questions!!!

Help me please!!! I forgot answers for control questions for my Apple ID
<E-mail Edited by Host>

Hello, Albert.
If you need to reset your security questions and have a rescue email attached to your Apple ID, this article will help you with this issue.
Rescue email address and how to reset Apple ID security questions
http://support.apple.com/kb/HT5312
If you are still unable to reset your security questions or do not have a rescue email associated with your account, you will need to contact iTunes Store support.
Cheers,
Jason H.

Delegate control, how can I find out which one is being used?

I am working with some mysites customizations and came across a delegate control. How can I tell which control SharePoint is currently pointing this delegate control to? If someone already swapped it out, how would I know?
<SharePoint:DelegateControl runat="server" ControlId="ColleaguesLink1" Scope="Farm" />
What does ColleaguesLink1 currently point to? What did it originally point to?

This blog post may get you started (same applies to SharePoint 2010):
http://usingsystem.wordpress.com/2008/04/11/sharepoint-delegatecontrol/
I hope this helps,
Regards,
Yuri Lausberg, MCP, MCAD, MCSD, MCTS, MCPD

File Path Control question

Simple question: How do I invoke the Open command in the File Path control? My reason is of my user hasn't supplied a file, then I want to force the user to select one.
Solved!
Go to Solution.

Most file related vi should prompt if there is no file path. If for some reason you are not getting that you could check to see if the file path is empty and add a prompt see below:
Tim
Johnson Controls
Holland Michigan

Fan control questions

Hi
I have a mid 2008 2.8Ghz iMac with the stock 320 Gb HD and 4 Gb ram. It runs fine but I am worried about how hot the case gets at times, in particular the top left corner. I have iStat widget installed too which shows what I think are reasonable temps most of the time, but sometimes even after just everyday use (browsing etc...) some of the temps seem high (power supply is presently at 75c). The fan speeds don't seem to increase much at all from the factory minimums. I know about smc fan control and iMac fan control, but I have a couple of questions before I decide to use them.
1. Do you think I need to be worried about this?
2. What damage could I cause by running the fans harder?
3. If I use these utilities to push the fans harder than Apple recommends, will I void my Apple Care?
Looking forward to your answers
Paul

An utility like smcFanControl only changes the minimum fan speed setting. You are still running the fans well below its maximum capability. So the change is to the low end of the speed range, not the high end. You CAN set it high enough so that the minimum fan speed sounds like a small vacuum cleaner, but I would not set it that way for any length of time. I just tried it once to see what it sounded like with the fans running at a high speed (never heard them before). There is a max possible setting, so you can't set it to a crazy high number.
I use smcFanControl and have the fans set about 25% higher than the default speed. I still can't even hear them at that setting, so I figured I wasn't doing any harm and it may help my iMac run cooler (not that noticed any issues with heat).
I can't see how it would void AppleCare. Unless you set it to sound like a vacuum cleaner all the time (which would be really annoying), you are running the fans well within their normal operating range.
Note: The adjusted minimum fan speed is only in effect while smcFanControl is running in the background. It does not change any system or hardware settings. To go back to the default settings, just quit smcFanControl.

Calendar delegate-related question

Hello! My organization is on the Microsoft Exchange system. I have shared my Mac Calendar account with a couple of secretaries for scheduling appointments. I have added both of them as "delegates" and given them read/write access to the calendar and no access to tasks. It's been working fine, except for one problem. Anytime anyone sends me a meeting invitation to my calendar, the invitation notification goes to all my delegates as well rather than just me. Is there a setting that will allow me to prevent that from happening?
Thanks for any help.
Subbu

I have a similar question. Now in IOS7 my delgates get my calendar invites, and I see the invite in my inbox, but now ios7 is not leeting me accept the invite. It says my delegate is managing the message (I want us both to be able to manage the message). Any seetings somewehre where this can be changed?

Delegate control question

Similar Messages

Maybe you are looking for