I'm using one of the custom attributes to hold a user's secondary
email address and have written some Classic ASP code to write this
into the user object and read it out etcetera.
This all works fine under my account, a domain administrator user, so
I've created a new user set up only for this job to improve security.
I'm able to set appropriate permissions on the Write Custom Attribute
# user property permission on a per user basis which is good as well.
However as I plan to write to hundreds of users I want to assign this
permission to an Organisational Unit or for example the User group but
unfortunately the effective permissions show that this does not enable
writing the property and the code fails. I think it works fine for
regular object permissions but not for the properties, what am I doing
wrong?
Any help is appreciated.