How users can update their own personal properties in Active Directory

TheMSsForum.com: The Microsoft Software Forum

I wonder if it is possible for users update their personal properties in
Windows 2003 - AD but only the fields i want to/choose.

Can someone give me a tip or script how can this be done?...

Thanks
[]
Ricky
(sorry for so must posts)
Top

Re: How users can update their own personal properties in Active Directory by Brian

Brian
Mon Jul 10 02:28:36 CDT 2006

Yes in fact they already have rights to update a bunch of fields by default.

If you have your users search for themselves via the Start>Search interface
in Windows, they can edit their object.

Go eay on the crossposting :)

--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services

www.briandesmond.com


"Ricky" <newsgroupsmail@gmail.com> wrote in message
news:%23L0wkV3oGHA.4716@TK2MSFTNGP05.phx.gbl...
>I wonder if it is possible for users update their personal properties in
>Windows 2003 - AD but only the fields i want to/choose.
>
> Can someone give me a tip or script how can this be done?...
>
> Thanks
> []
> Ricky
> (sorry for so must posts)
>


Top

Re: How users can update their own personal properties in Active Directory by Jerold

Jerold
Mon Jul 10 08:32:47 CDT 2006

On Sun, 9 Jul 2006 17:33:25 +0100, "Ricky" <newsgroupsmail@gmail.com> wrote:

>I wonder if it is possible for users update their personal properties in
>Windows 2003 - AD but only the fields i want to/choose.
>
>Can someone give me a tip or script how can this be done?...
>
>Thanks
>[]
>Ricky
>(sorry for so must posts)
>
See tip 10167 » How can I allow users to maintain their own personal information in Active Directory?
in the 'Tips & Tricks' at http://www.jsifaq.com


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com
Top

Re: How users can update their own personal properties in Active Directory by OldDog

OldDog
Tue Jul 11 10:04:37 CDT 2006

<!-- Active Directory HTA for Users to edit personal information:
Address, Phone Number, Cell Phone etc.
by Aaron Castillo
I was presented with the need for my users to be able to keep their
contact information current without
delegating the task to an irresponsible employee that would not be able
to keep up with the task, in turn
I created this HTA that allows users to view/edit their own information
in Active Directory without the user
having any more privileges than a user. This also creates an access.log
file so you can see how many times
your HTA was opened and by whom it was opened and where (just a small
bonus). The Domain Controller name
is hardcoded in the script once you have copied the text to your .HTA
just find and replace MyDC with the
name of your Domain Controller. MyDC appears only twice in this HTA.
Enjoy! Email me your comments and
suggestions at aarongcastillo@hotmailDOTcom

Thanks Aaron Castillo


--------------------------------------------------------------------------------

Script code:
Code samples provided on ScriptingAnswers.com are provided AS-IS
without warranty or guarantee of any kind.
ScriptingAnswers.com is not responsible for content posted by
individuals who use this site.
All code samples should be thoroughly reviewed and tested before being
used in a production environment.
-->

<html>
<head>
<title>Contingency Preparedness Assistant v1.0</title>

<HTA:APPLICATION
ID="objTSBITGuys"
APPLICATIONNAME="Contingency Preparedness Assistant v1.0"
SCROLL="Yes"
SINGLEINSTANCE="yes"
WINDOWSTATE="normal"
BORDER="dialog"
CAPTION="e-Assistant"
>
</head>


<SCRIPT Language="VBScript">

Sub Window_Onload
Set objWshNet = CreateObject("Wscript.Network")
strCN = lcase(objWshNet.ComputerName)
strCU = lcase(objWshNet.UserName)

Dim objFS, objFile, append
append = 8

Const ForWriting = 2

Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objLogFile = objFSO.OpenTextFile("access.log", append, True)

objLogFile.WriteLine (strCU & " on " & strCN & " " & Now())

objLogFile.Close
Set objWSHShell = CreateObject("Wscript.Shell")
'36 Msgbox "The application has started."
Set objWSHShell = CreateObject("Wscript.Shell")
' Msgbox "The application has started."
Set objADSysInfo = CreateObject("ADSystemInfo")
strUser = objADSysInfo.UserName
Set objUser = GetObject("LDAP://" & strUser)
'msgBox "You current object path is: " & strUser
strgivenName = objUser.Get("givenName")
strdisplayName = objUser.Get("displayName")
MsgBox "Hello, " & strgivenName & "!"
OptionLists
'47===================================================================
strMyDC = "My Domain Controller" & "/"
'strMyDC = My Domain Controller
Set objADSysInfo = CreateObject("ADSystemInfo")
strUser = objADSysInfo.UserName
Set objItem = GetObject("LDAP://" & strMyDC & strUser)
On Error Resume Next
'GetInfo
strStreetAddress = objItem.Get("streetAddress")
strPOBOX = objItem.Get("postOfficeBox")
strCity = objItem.Get("l")
strZIP = objItem.Get("postalCode")
strTelephoneNumber = objItem.Get("telephoneNumber")
strMobile = objItem.Get("mobile")
strTitle = objItem.Get("title")
'62 WriteInfo
Txt_Add.Value = strStreetAddress
'Txt_POBox.Value = strPOBOX
Txt_City.Value = strCity
Txt_ZIP.Value = strZIP
Txt_PhN.Value = strTelephoneNumber
Txt_Cell.Value = strMobile
Txt_Title.Value = strTitle
End Sub

Sub OptionLists
'73====================================================================
'====================================================================
End Sub

Sub Update
Set objADSysInfo = CreateObject("ADSystemInfo")
strUser = objADSysInfo.UserName
Set objItem = GetObject("LDAP://My Domain Controller/" & strUser)
On Error Resume Next
objItem.Put "streetAddress", Txt_Add.Value
objItem.Put "l", Txt_City.Value
objItem.Put "PostalCode", Txt_ZIP.Value
objItem.Put "TelephoneNumber", Txt_PhN.Value
objItem.Put "mobile", Txt_Cell.Value
objItem.SetInfo
'Line 85
msgbox "Thank you, your information has been saved."
End Sub

Sub ExitHTA
self.close()
End Sub

Sub PrintThis
Window.Print()
End Sub

</SCRIPT>
<body>
<body STYLE="font:12pt arial; color:black;
filter:progid:DXImageTransform.Microsoft.Gradient
(GradientType=0, StartColorStr='#FFF0F5', EndColorStr='#FAFAD2')">

The purpose of this Contingency Preparedness Contact Assistant is to
maintain an accurate and current method of contacting you. You the user
are to manage your contact information; in addition, you are
responsible for keeping your contact information current and
up-to-date. All of the information requested in this will be used
solely as a means of contacting you in the event of an
emergency.<br>&nbsp;<br>
<hr>
To use this Assistant enter the requested information and press
'Update' once you have finished.<br>&nbsp;<br>
Address:<br>&nbsp;<input type="text" name="Txt_Add" size="50"><br><br>
City:<br>&nbsp;<input type="text" name="Txt_City" size="50"><br><br>
Zip Code:<br>&nbsp;<input type="text" name="Txt_ZIP" size="50"><br><br>
Cell Phone: <font color="red" face="Arial" size="2">Example: (417)
123-4567</font><br>&nbsp;<input type="text" name="Txt_Cell"
size="50"><br><br>
Telephone: <font color="red" face="Arial" size="2">Example: (417)
123-4567</font><br>&nbsp;<input type="text" name="Txt_PhN"
size="50"><br><br>
Title:<br>&nbsp;<input type="text" name="Txt_Title" size="50"><br><br>


<hr>
<input id=runbutton class="button" type="button" value="Print "
name="PrintNow" onClick="PrintThis">
<input id=runbutton class="button" type="button" value="Update "
name="UpdateInf" onClick="Update">
<input id=runbutton class="button" type="button" value="Exit"
name="run_button" onClick="ExitHTA">

</body>

</html>

Ricky wrote:
> I wonder if it is possible for users update their personal properties in
> Windows 2003 - AD but only the fields i want to/choose.
>
> Can someone give me a tip or script how can this be done?...
>
> Thanks
> []
> Ricky
> (sorry for so must posts)

Top

Re: How users can update their own personal properties in Active Directory by Ken

Ken
Wed Jul 19 14:03:28 CDT 2006

Once you delegate the permissions using the delegation wizard or other
means, then you may want to create a nice interface for your users to do
this. Try granting the "self" permission.
Personally I wouldn't want to give all of my users ADUC to make updates.
You can use DSRAZOR for Windows to create a custom UI. You can make the
text say whatever you want, arrange the edit boxes and buttons how you want,
and only include the edit fields you wish. You put this UI into a
stand-alone .exe and share it on your network. Then you can just direct
people to it or push out a shortcut to it on their desktops.

You can see a screenshot of it here:
http://www.myitforum.com/forums/Limit_User_Access_for_AD_Users_%26_Computers/m_137141/tm.htm

Or go directly to the product website here:
www.visualclick.com/?source=userdet071906

--
Ken Aldrich
DSRAZOR for Windows
Visual Click Software, Inc.
www.visualclick.com

"Ricky" <newsgroupsmail@gmail.com> wrote in message
news:%23L0wkV3oGHA.4716@TK2MSFTNGP05.phx.gbl...
>I wonder if it is possible for users update their personal properties in
>Windows 2003 - AD but only the fields i want to/choose.
>
> Can someone give me a tip or script how can this be done?...
>
> Thanks
> []
> Ricky
> (sorry for so must posts)
>


Top