How do I prevent an Assistant Admin delegated the powers to modify all user account properties from (NETIQKB33708)

goal
How do I prevent an Assistant Admin delegated the powers to modify all user account properties from modifying the Password not required flag?

fact
Directory and Resource Administrator 6.x

fact
Directory and Resource Administrator 7.x

fix

In order to prevent an Assistant Admin who has been delegated the powers to modify all user account properties from modifying the Password not required flag, there are two options available:

• Modify the ActiveView configuration by granting the Assistant Admin powers over individual fields instead of the All properties - Modify a user account power. If the individal powers are granted, the Assistant Admin will not be presented with the option to check the Password not required flag. 

OR

• A pre-task trigger can also be created in Directory and Resource Administrator which checks if the Password not required flag is being modified and returns a customized error message if an Assistant Admin attempts to modify the flag.

note

A sample script called PasswordNotRequired.vbs prevents Assistant Admins from modifying the Password not required flag.  This script is available on the DRA Knowledge Depot.

• DRA Knowledge Depot (requires username and password)

Formerly known as NETIQKB33708