![]() |
![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks. |
| |||||||
![]() |
| |
| | #1 (permalink) |
| | what authorisation is needed? Hi, A company build a vbs script for us. This script makes it possible to manage active directory groups via a webbrowser. So managers can easily adjust group membership via the webbrowser. In this script a user has to be "inserted" to "manage" the active directory groups. If i use my domain admin credentials the script runs fine. Because of security i don't want the credentials of the domain admin account to be in this script. The script has to run from a memberserver! So i thought i will make a simple domain user account in AD and give this account delegate of control rights on active directory (to manage groups). Tried this, but the script won't run with these credentials. The script will query AD with this account, but won't make modifications. I also had this user given Full control delegation of everything in AD. It still doesn't work. Does anyone knows what kind of autorisation i need? Thx in advance, Ramon |
My System Specs![]() |
| | #2 (permalink) |
| | Re: what authorisation is needed? I'm not sure about what you would need to delegate, but i do know that you could have the script ask for the username and password variblename = inputbox("Please enter your username") secondvariblename = inputbox("Please enter your password") the password would show in the textbox though. it sounds like an ASP script though. the code above would not work in ASP. You would have to create a html form that sends the credentials to the script. On Mar 12, 10:52*am, "Ramon" <ra...@xxxxxx> wrote: Quote: > Hi, > > A company build a vbs script for us. This script makes it possible to manage > active directory groups via a webbrowser. So managers can easily adjust > group membership via the webbrowser. > In this script a user has to be "inserted" to "manage" the active directory > groups. If i use my domain admin credentials the script runs fine. Because > of security i don't want the credentials of the domain admin account to be > in this script. The script has to run from a memberserver! > > So i thought i will make a simple domain user account in AD and give this > account delegate of control rights on active directory (to manage groups).. > Tried this, but the script won't run with these credentials. > The script will query AD with this account, but won't make modifications. > I also had this user given Full control delegation of everything in AD. It > still doesn't work. > > Does anyone knows what kind of autorisation i need? > > Thx in advance, > > Ramon |
My System Specs![]() |
![]() |
| Thread Tools | |
| |
Similar Threads | ||||
| Thread | Forum | |||
| Help needed... | Vista General | |||
| not needed | Vista General | |||
| Immediate Help Needed! | Drivers | |||
| Authorisation Required | Vista General | |||