How do I setup a specific user to edit their department phone numbers?

We have and IT liaison in each department and I'd like them to be able to edit their own departments mailboxes attributes.  ie. phone numbers, title...
I was hoping they would be able to do this in Outlook by opening up the Address Book selecting the user, and changing their new phone number, title ...
What do I need to do to allow them to manage this task for their department only?
EX2013 sp1/Win2012/OL2010-2013
PennyM

Hi PennyM,
Based on my knowledge, Mail Recipients role is the least permission to do what you need. What's more, if different departments are in different Organization Unit, you can use the following cmdlet to let IT liaison edit their OU only.
New-RoleGroup -Name "test OU permission" -Roles "Mail Recipients" -Members test1 -RecipientOrganizationalUnitScope contoso.com/users
Hope this can be helpful to you.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Similar Messages

  • How can I set a specific user log on neme to a specific machine

    Greeting,
    I have a question : 
    How can I set a specific user log on name to a specific machine.
    e.g. 
    Only User.A can log on to PC.A and the other can not.
    Base On :
    Windows Server 2003
    Active Directory Version : 5.2.3790.1812

    Technically we're both right.  This depends on what scenario you're setting this up.
    1)  If you want to say only this person can log on to this machine, and it's not an enterprise solution (meaning you have a handful of computers you want restricted, not all computers) then do something like Yan Li has recommended.  However, I
    do not recommend using any DENY LOCAL LOGON user rights.  In this case, you would have to deny everyone except 'User A' and your Administrators.  If you put a user in ALLOW LOCAL LOGON and DENY LOCAL LOGON, then DENY wins and no one logs in.  Instead,
    you should remove all the settings from ALLOW LOCAL LOGON and add only User A and administrators.
    2) If this is an enterprise solution, use the LOG ON TO option I mentioned before.  Managing user right assignments per machine is very difficult and isn't a practical way to do it on a large scale.  If every user in your domain is assigned a computer
    that they can use, only that user can use that machine and that machine will effectively only allow that user.  For this to work, EVERY user must be restricted to a workstation, if no setting is present, then that user can log on anywhere.  This
    is my preferred solution still.
    Like I said, it depends on your situation to which route is better.  I hope this helps and is clear and easy to understand.
    - If you have my posts to be helpful, or the answer, please mark them appropriately.  Thank you.
    Chris Ream

  • How to get Reports for specific User that how many password has been reset using FIM SSPR in FIM 2010 R2 SSPR

    Hi,
    How to get Reports for specific User that how many password has been reset using FIM SSPR in FIM 2010 R2 SSPR
    Regards
    Anil Kumar

    Hello there Anil,
    A simple way to quickly get a overview is to look at the request history within the portal environment (note that this will expire in a few day based on your environment, after that you would need to FIM Reporting Module - but you could increase this to
    maybe 60 days to so, watch the DB size).
    To do this you could create some custom search scopes of do some custom queries. The creator of the SSPR activities always has the same GUID so you can use that so search.
    In your search scope you can use the following XPath to play with.
    - All Password Reset Requests - /Request[Creator='b0b36673-d43b-4cfa-a7a2-aff14fd90522' and Operation='Put']
    - All Completed Password Reset Requests - /Request[Creator='b0b36673-d43b-4cfa-a7a2-aff14fd90522' and RequestStatus=‘Completed']
    You can play with the "RequestStatus".
    Hope this helps.
    Almero Steyn (http://www.puttyq.com) [If a post helps to resolve your issue, please click the "Mark as Answer" of that post or "Helpful" button of that post. By marking a post as Answered or Helpful, you help others find the answer
    faster.]

  • How can we restrict the other user to add their user id's to the user group created in SQ03?

    Hello All,
    How can we restrict the other user to add their user id's to the user group created in SQ03?
    When we enter the user group name and click on "Assign users and Infosets" button in the attached pic "User Group" .
    I was able to enter my user id in other user groups. How to Grey out the other rows in the attached pic "User Group 1".

    How strange I answered (or at least helped) this very same question earlier today. Here the link to my previous answer then:
    http://scn.sap.com/thread/3536135

  • Allow user to edit their own Address Book server entry

    Hiya.
    I'm looking for a way to let users edit their own information in the Address Book Server/Open directory. I've made sure the main group for users is in the AB Read-Write Groups group in WGM.
    I've even checked the box in Server Admin that says "Allow users to edit their own contact information", but after adding the account to an address book client and authenticating as a user (For example, myself), I can't edit my own contact info anywhere that will push to the server.
    Is there any way to do this?
    Thanks!

    You'd need to write a php script or something to interface with applescript…

  • How come when I look at my text messages, my contacts' phone numbers appear instead of their contact names?

    How come when I look at my text messages, my contacts' phone numbers appear instead of their contact names?

    If you're with Verizon, here's what I found on the boards:
    Dial *228, press 1 when the nice lady answers and wait until she tells you your phone has been successfully programmed.
    Then hang up, and press the home key twice rapidly and delete the open/running apps that appear there - delete from that second screen, NOT from the Dock at the bottom of your home screen!  You don't want to delete the programs, you just want to close the open/running apps.
    Wait 5 minutes or so, then voila!  Mine was fixed!

  • How to populate values dynamically & allows user to edit some other columns

    Hi..I am new to Apex..please help me to sove it out...
    I have a scenario like editing the some of the Customer details where as one field is dynamically populating from a different table.
    Columns like Include, Frequency, Communication, Address and Exclude has to be displayed in tabular format and data should be stored in a table called "om_customer_catalog ".
    In this "Communication " column value is dynamically populating from a table called "om_customer_settings" and the no. of records in the om_customer_settings table may vary time to time as per the settins in the Admin module.
    I want the user to edit all details except Communication column for all the rows which is displayed and the no. of rows should be displayed dynamically as per the settings.
    how can i achieve this?...which way i need to proceed like whether report kind of thing..or someother way..
    hope some reply....
    More Column details:
    Include - a Check box with editable(values Y or N)
    Communication - text field with display only(values like Promotional Email, All Email etc.)
    Frequecny - Drop downbox with editable(values Annually/Monthly/Weekly etc)
    Address - Drop down with editable(static values like Me, Father, Mother,Brother etc)
    Exclude Reason - text field with editable(any text value)
    Apply - a button for saving the changes
    thanks in advace...
    renjish

    Hello Renjish,
    Solution is quite tricky, You have to make a procedure which select each row of your tabular form and executes the update statement (customized).
    e.g
    to select each row of table use
    begin
    FOR I in 1..APEX_APPLICATION.G_F01.COUNT
    LOOP
    insert into table_name values(APEX_APPLICATION.G_F01(i),'PENDING',sysdate,'RESOURCE','','','','');
    end loop;
    end;
    here APEX_APPLICATION.G_F01(i) will return the value of the first column of selected row. Pick the values and make a cutomized update command.
    Regards,
    bhanwar

  • My iphone 4s is importing contact information from FB and my email account.  When I pull up my contacts it only shows e-mail information and the phone numbers have disappeared.  How do I get my old contact list back with the phone numbers?

    My iphone 4s is importing contact information from FB and my e-mail account.  When I try to look at my contact list it is showing everyone I have on those lists and it only shows their email addresses.  The phone numbers for my contacts have disappeared and I don't know how to get them back.

        Hi macmac57. I don't memorize my numbers anymore, so I know how important it is to have all your contacts on your phone at all times. Did an update occur or a new application download when your contacts disappeared? Have you been backing up your device with your computer? You can try to restore your contacts from your last backup. http://support.apple.com/kb/HT1414
    Are you syncing your iPhone between multiple computers? This can sometimes create issues with your contacts. http://support.apple.com/kb/TS1474
    If you were already using iCloud to back up your contacts, check out http://support.apple.com/kb/TS3998 for some great tips from Apple.
    I do hope this has been helpful for you to restore your contacts.
    JenniferH_VZW
    Please follow us on Twitter @vzwsupport

  • How do I setup ADE: multiple users / multiple devices

    Hi,
    I'm new to this DRM stuff and totally confused as to how it works, and the implications of different setups. I've seen lots of posts suggesting if ADE is not setup correctly from the start, you end up with a cascade of problems trying to correct the installation, and having to play around in the registry.
    As I understand it, ADE is a download client, encrypter/decrypter process, a transfer client, and a book renderer.
    Although I've never done this, I guess what I want is the sort of setup you would have at an internet cafe. Someone can bring in their reader (already registered with their home computer). Go online, buy a book, use their Adobe Id to download the e-book (?) and transfer it to their reader. And read it.
    I'm not sure about which parts of the Authorization/Registration/Encryption process are linked to each other.
    I have read that ADE does not write anything to the e-reader during registration. But rather reads the serial number of the e-reader to identify it. Presumably ADE re-encrypts the book using the devices serial number when it transfers the book to the e-reader. So, according to the post, there is no problem having an  e-reader registered to many installations of ADE.
    Similarly I've read that authorization is only required to establish your rights to download the encrypted book.
    However, I've also seen posts that contradict these.
    Also I've seen that as the book is encrypted for a specific reader only during transfer, you can't use explorer to copy books onto the reader.
    cheers,
    matt
    ps. I've got a KoboGlo, I'm not from Kobo. I couldn't find a moniker, They were all taken and out of frustration used my reader as a moniker. And now I'm stuck with it.

    anybody, any idea ?

  • IN OBIEE, how to disable drilldown for specific users

    How to disable drilldown action in a hierarchy as manager,lead,reporter.
    in this scenario i need to disable hierarchy for the specified reporter and the upper two peoples will have that functionality
    Awaiting ur reply
    Bala

    The RPD hierarchies themselves have no security attributes on them. So your left with a workaround or two. First one that springs to mind :
    Create the report in question save this as 'Manager' report.
    Create the report in question, disable drilling on the column in question, save this as 'Reporter' report.
    Deploy both reports to the dashboard in seperate sections and use the section permissions (against the Webgroups those users exist in) to determine which section is displayed to which user.
    Maybe more options will come up from other users, but this one is a start.
    Hope this helps,
    Alastair

  • How to start service as specific user!!!

    Hi all,
    I need to create an apache service script. All is fine with this and I've imported etc but its running as root and I want to run as apache. Is there an easy way of doing this other than an su -c???
    Cheers

    Extremely easy:
    Modify the httpd.conf and tell it which user and group to run as.

  • How to Find mailboxes a specific user has full access to

    Hi, 
    I have been searching all the threads but all i am getting is user mailbox is accessible to following users. I run this command:
    Get-Mailbox -resultsize unlimited | Get-MailboxPermission | Where {(!$_.isinherited) -and ($_.user.SecurityIdentifier -ne "S-1-5-10") -and  ($_.accessrights -contains "fullaccess")  } | Select Identity,User
    It is taking so much time as we have 20K mailboxes. Then i tried this:
    Get-Mailbox -server exdm01 -resultsize unlimited | Get-MailboxPermission | Where {(!$_.isinherited) -and ($_.user.SecurityIdentifier -ne "S-1-5-10") -and  ($_.accessrights -contains "fullaccess")  } | Select Identity,User
    It gives me list of those users who have access to mailboxes. But what if i want to see user_A is accessing which mailboxes. we
    need to find out which mailboxes user has FULL MAILBOX ACCESS to NOT which users can access this user's mailbox. I hope you will understand, i DONT want the list which MANAGE FULL ACCESS PERMISSION option gives in GUI, but i WANT vice-versa. 
    We migrated 100 users to different domain, now i want to know these users' association with others' mailboxes. 
    Hasan

    Please check with this
    Get-Mailbox -Server "SERVERNAME" -resultsize "Unlimited" | Get-MailboxPermission | where { ($_.AccessRights -eq "FullAccess") -and ($_.User -like "DOMAIN\TESTUSER") -and ($_.IsInherited -eq $false) -and -not ($_.User -like "NT AUTHORITY\SELF") } | ft User, @{Name="Identity";expression={($_.Identity -split "/")[-1]}} -Autosize
    Replace "DOMAIN\TESTUSER" with "Yourdomain\Yourusername" to check,  which will list the users which testuser has FullAccessPermission on.
    @Amit
    Apologize for the duplicate posting.
    Thanks, MAS
    Please mark as helpful if you find my comment helpful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

  • How do I restrict an sFTP user to just their home folder?

    Today I setup a user for on my Mac specifically for someone to sFTP files to my computer.
    I tested the connection on another computer on the network, it worked OK but I quickly realised that after logging in via an FTP client, I could got to the root dir and start to navigate around other folders, getting to other home directories, download photos etc.. all of which I dont want the user to do.
    I would like the FTP user to login, and only see their home directory, nothing else.
    the root shouldnt show any files for example.
    I have tried to lock things down and its a bit better, ensuring that a lot of the folders have owner only permissions, and group write only.
    However there are some folders that cannot be locked down by default.
    /Applications
    For example, any user can read any file in that folder, even if the user is only intended to FTP files.
    i have tried changing the group the user belongs to (changing it from 'Staff' to 'Nobody') but it doesnt seem to make a difference.
    Hope someone can help me with this please, perhaps there is a better way. I have not used any terminal commands in what I have done, everything has been  via the GUI (which I guess should be sufficient).

    Thanks Linc,
    that has helped a lot.
    Here is what I have done for the record:
    1) opened the sshd_config file in /etc
         sudo vi sshd_config
    2) added the following lines to the very bottom of the file:
    Match User MYUSER
    # The following two directivces force klm to become chrooted
    # and only have sftp available. No other chroot setup is required
    ChrootDirectory /Users/MYUSER/
    ForceCommand internal-sftp
    # For additional paranoia, siallow all types of port forwardings
    AllowTcpForwarding no
    GatewayPorts no
    X11Forwarding no
    3) Saved the file and tried to reconnect
    4) My FTP Software (on another computer on the network) wouldnt connect! I kept getting an error message:
         Error: Server unexpectedly closed network conection
         Error: Could not connect to server
    5) I opened up the "Console" program and looked at the secure.log under /var/log and saw the following entry:
    Aug  2 10:28:57 rmlloyd-imac sshd[6590]: fatal: bad ownership or modes for chroot directory component "/Users/MYUSER"
    This made me realise that it was someting to do with permissions on the home folder, but I still dont quite appreciate why the user logging in doesnt have permissions to its own folder as a root.
    6) Some searching on the internet yielded something like the perfect answer, that a home directory cannot be set as a chroot directory.
    So I changed the ChrootDirectory to:
    ChrootDirectory /Users
    7) Attempt to login with sFTP again works! What I see is the root appears to be the contents of /Users
    Conclusion
    This is much much better than the situation I was in originally, I can set access permissions to the home directories, but the ftp user still sees them. Its not perfect but it nearly is.
    I really wish I didnt have to mess around in the terminal though, as fun as it is, a check box added by apple to the user UI would do the job much easier. e.g.
    "Restrict user to home folder only" - makes the home folder the root
    "Restrict user to the following activities" - then have check boxes for sFTP etc...
    Then the apple UI can write to the sshd_config for me .
    All in all, I am very pleased and have learnt a fair bit from setting this up, so thanks to those that replied and I hope this information helps someone else one day.

  • How can I delete files that users saves in their computers after they logoff with GPO?

    hi, I have a domain where I would like to delete all the files that a users saves when they are in their session after the users logs off, the only files that would be saved are the ones they save in the space they have in the file server, can I do this
    with a Group Policy, or is there any other way I can achieve this? Thank You

    Hi,
    Allowing the users to save the files and later deleting will result in confusion and loss of critical data. Instead you can prohibit the users from saving the files in specific location using GPO.
    Checkout the below thread on related requirement and suggesstions,
    http://community.spiceworks.com/topic/262098-do-not-allow-users-to-save-keep-files-on-their-desktop?page=1#entry-1663217
    Regards,
    Gopi
    JiJi
    Technologies

  • How do I efficiently help multiple users to upgrade their devices?

    We have about 15 users using iPad, iPad1, and iPhone4, now the iOS5 is avaialble to these devices, I want to figure out the most efficient way to help them all  upgrade to iOS5, while most of them do not have iTunes installed on their workstations, some of them even doesn't have a workstation. Their devides were activated on my computer, and each Apple ID was created on each device.
    From my understanding on iDevices, I need to authorize each account on iTunes, to perform a backup, upgrade, and full restore. But if I do them all on my computer, my computer will have collection of contents from 15 Apple ID accounts, it would have to download all apps which were installed by all different users, under one copy of iTunes,  that is going to make a mess.
    And I can't do it on each of their computers because (1) some users don't have workstation, (2) we do not want them to interact with iTunes, it creates more need of management and support from IT department.
    So as an IT guy here, what should I do ?  One idea I came up with, which might be stupid, is to configure iTunes and authorize different apple ID's, under different Windwos profile, so one user's app don't get mixed with another one's.  I know technically speaking user A's apps won't be sync'ed into user B's device, but I just don't fele comfortable mixing them together and see that it sync'ed 25 out of 80 apps into one upgraded device, that will create some confusions.

    anybody, any idea ?

Maybe you are looking for