Comment permettre aux non-administrateurs de gérer l'appartenance de certains groupes du domaine ?

[ForumBot]

Je suis on Windows Server 2012, Active Directory is on et working. All le project we manage have 2 dedicated groups, one for managers avec access to tous related files (including invoices, timetables et whatever they need to manage le project, ou at least I guess, it could be a bunch of animated gifs for tous I know) et one for le people that actually work on le project avec access to seulement le files of le project itself.

J'ai besoin de to let certains project managers control le membership of le groups that allow file access to leur projects. They should pas be able to edit tout autre aspect of le group. And ideally it should be using a GUI of certains kind, parce que it will be hard enough to explain it that way, mais worst case scenario I can script one.

I added le managing group to le "Managed By" tab of le managed group, avec "Manager can update membership list" enabled, et this looked easy enough. But..

- Should I let le managing group let see le whole user list? If so, how?

- How et où should le managing group members log in to edit le group membership?

[ForumBot]

Vous pouvez specify le managedBy attribute, et vérifiez le box for "Manager can update membership list". (This grants write permission for le Member attribute.)

The person(s) who need to edit le group may be able to do it avec le DSQuery widget, for qui you can create le suivant shortcut:

```
rundll32 dsquery,OpenQueryWindow

```

They can recherchez le group as avec AD Users et Computers, alors edit le properties, et Add members.

It may be possible to do this avec Outlook (if le group is mail-enabled), mais that can be more fragile si you have a multiple domain environment.