i create GPO logon that Update user descreption

and to do  that h had to delegate  Permission "property-specifc" to user to write in descreption  attribute

and that work

but the problem is the user can update other user descreption if he use secripts

and i want user to update only his descreption

Hi,

This is Exchange server forum. I would like to verify if there is an Exchange server. Actually, we have a dedicated support team regarding the Microsoft Windows server, I recommend you ask your question on our Windows server forum which is staffed by more experts specializing in this kind of problems. Thanks for your understanding.

For your convenience:

http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?category=windowsserver

If you have any problem with Exchange server, welcome to our Exchange forum.

Hope it helps.

Best regards,

Hi,

This is Exchange server forum. I would like to verify if there is an Exchange server. Actually, we have a dedicated support team regarding the Microsoft Windows server, I recommend you ask your question on our Windows server forum which is staffed by more experts specializing in this kind of problems. Thanks for your understanding.

For your convenience:

http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?category=windowsserver

If you have any problem with Exchange server, welcome to our Exchange forum.

Hope it helps.

Best regards,

In ADUC, the Delegation of Control wizard will allow you to do this, using a custom task for delegation. Pick just the fields you want them to have Write access to.

To see all the delegation privileges in AD, please checkout this : http://windowsitpro.com/active-directory/delegating-privileges-active-directory

Further, to achieve this task and assign the permission to users for updating their own attributes by-self, you can have a look at this Active directory self-services application that would be a perfect approach for you.