Tuesday, February 1, 2011

Delegate the enable/disable accounts permission in Active Directory

To delegate the ability to enable and disable user accounts in Active Directory:

Launch Active Directory Users and Computers with adminsitrative credentials
Right click on the OU where you want to delegate the ability to enable and disable user accounts
Select the Active Directory security group that you want to delegate the ability to and press Next
Select Create Custom Task to Delegate and press Next
Under Delegate Control Of select the Only the following objects in the folder radio button
Select the User objects check box and press Next
Under Show these permissions uncheck General and select Property-specific
Select the Read userAccountControl and Write userAccountControl check boxes and press Next and Finish

Hoe to convert a a mailbot to a shared mailbox

Set-Mailbox ConfRoom1 -Type Shared

http://technet.microsoft.com/en-us/library/bb201749.aspx

Tuesday, January 25, 2011

Step-by-step Microsoft Lync 2010 Consolidated Standard Server Install Guide

I use the following link , and it worked like a charm.

http://imaucblog.com/archive/2010/09/15/step-by-step-microsoft-lync-2010-consolidated-standard-server-install-guide/

Delegate permission let one user to join pc to a domain

1. Click Start, click Run, type dsa.msc, and then click OK.
2. In the task pane, expand the domain node.
3. Locate and right-click the OU that you want to modify, and then click
Delegate Control.
4. In the Delegation of Control Wizard, click Next.
5. Click Add to add a specific user or a specific group to the Selected users
and groups list, and then click Next.
6. In the Tasks to Delegate page, click Create a custom task to delegate,
and then click Next.
7. Click Only the following objects in the folder, and then from the list,
click to select the following check boxes: . Computer objects
. Create selected objects in this folder
. Delete selected objects in this folder

8. Click Next.
9. In the Permissions list, click to select the following check boxes:. Reset
Password
. Validated write to DNS host name
. Read and write Account Restrictions
. Validated write to service principal name

10. Click Next, and then click Finish.
11. Close the "Active Directory Users and Computers" MMC snap-in.