Assign or remove digital (X.509) certificates from the user in Active Directory (read/write the userCertificate attribute of user objects); no other permissions are included. | |
Change password on user object (User-Change-Password extended right); no other permissions are included. | |
Create copies of existing user objects; no other permissions are included. | |
Users - Create |
Create user objects; no other permissions are included. |
Delete user objects; no other permissions are included. | |
Perform the deprovisioning operation on user objects; no other permissions are included. | |
Users - Undo Deprovision |
Perform the undo deprovisioning operation on user objects; no other permissions are included. |
Users - Undo Deprovision - Deny |
Prohibit the undo deprovisioning operation on user objects; no other permissions are included. |
Users - Enable/Disable Account |
Enable or disable user objects; no other permissions are included. |
List user objects; no other permissions are included. | |
View a list of groups to which a given user belongs; no other permissions are included. | |
Users - Read/Write Logon Information |
View and modify properties that describe logon information for user objects (User-Logon property set); no other permissions are included. Property set members: See “User-Logon Property Set” at http://msdn.microsoft.com/en-us/library/ms684415.aspx |
Users - Read/Write Account Information |
View or modify properties that describe account information for user objects (no other permissions are included):
|
Users - Read/Write Account Restrictions |
View and modify properties that describe account restrictions for user objects (User-Account-Restrictions property set); no other permissions are included. Property set members: See “User-Account-Restrictions Property Set” at http://msdn.microsoft.com/en-us/library/ms684412.aspx |
Users - Read/Write Dial-In Properties |
View and modify properties that describe dial-in related information for user objects (no other permissions are included): |
View and modify properties that constitute general information for user objects (General-Information property set); no other permissions are included. Property set members: See “General-Information Property Set” at http://msdn.microsoft.com/en-us/library/ms684366.aspx | |
Users - Read/Write Personal Information |
View and modify properties that describe personal information for user objects (Personal-Information property set); no other permissions are included. Property set members: See “Personal-Information Property Set” at http://msdn.microsoft.com/en-us/library/ms684394.aspx |
Users - Read/Write Organizational Information |
View and modify properties that describe organization related information for user objects (no other permissions are included): |
Users - Read/Write Phone and Mail Options |
View and modify properties that describe email related information for user objects (Email-Information property set); no other permissions are included. Property set members: See “Email-Information Property Set” at http://msdn.microsoft.com/en-us/library/ms684362.aspx |
Users - Read/Write Profile Properties |
View and modify properties that describe profile related information for user objects (no other permissions are included): |
Users - Read/Write Public Information |
View and modify properties that describe public information for user objects (Public-Information property set); no other permissions are included. Property set members: See “Public-Information Property Set” at http://msdn.microsoft.com/en-us/library/ms684396.aspx |
Users - Read/Write Web Information |
View and modify properties that describe Web-related information for user objects (Web-Information property set); no other permissions are included. Property set members: See “Web-Information Property Set” at http://msdn.microsoft.com/en-us/library/ms684418.aspx |
Users - Read/Write WTS Properties |
View and modify properties that describe Terminal Services related information for user objects (no other permissions are included): |
Users - Rename |
Rename user objects; no other permissions are included. |
Users - Reset Password (Extended Right) |
Reset password on user object (User-Reset-Password extended right); no other permissions are included. |
Use the 'Check Policy' command; no other permissions are included. | |
Users - Unlock Account |
Unlock user objects that get locked due to a number of failed logon attempts; no other permissions are included. |
Users - Write Password |
Set password on user object; no other permissions are included. |
Use the 'Change History' and 'User Activity' commands; no other permissions are included. | |
Users - View Delegated Rights (Extended Right) |
Use the 'Delegated Rights' command; no other permissions are included. |
Users - View Digital Certificates |
View digital (X.509) certificates assigned to the user in Active Directory (read the userCertificate attribute of user objects); no other permissions are included. |
Use the 'Entitlement Profile' command, to view resources to which a given user is entitled. No other permissions are included. |
© ALL RIGHTS RESERVED. Feedback 利用規約 プライバシー Cookie Preference Center