You will need to
Allow the
Modify Object permission.
To do so, follow these sample steps:
1. Select a console group (computer folder) where this permission would apply in Computers section of the console - upper left corner.
2. Right-click on the console group, choose
Permissions.
3. Here you can either choose a user name/id or a group tab.
4. Regardless if If you'd chosen group or a single user, you must select that user/group name by clicking on it once.
5. On the right of that window, you will see a number of permissions available for you to configure. Choose
Allow check box next to
Modify Object.
6. Click
OK button and test your new settings.
You also may have to choose
Allow for
Schedule Modify Configuration permission at the same window.
There is a very useful button called "
Evaluate Permissions" that can help you to see if any inherited permissions are in play.
Also, a very important step is to make sure that your DS Console is setup with a Domain Account that has permissions to join and re-joun to your domain/Active Directory.
Hope this helps.
Quote:
Originally Posted by JamesC
No the permissions in the console itself. When you right click on a PC and click on configure it brings up a Computer Configuration Properties windows. When a user tries to change settings they are getting a permission denied. I just need to know what security setting will allow them to change it.
|