I have an application (object) that has been created, and I want my
desktop/OU administrators to "only" be able to modify the "assiciations"
tab and nothing else. That way I can control the design and configuration
of the app object and they can control the desitribution. Does anyone know
the rights and attributes that I would need to configure to make this
happen? The application object is in an OU that is above the OUs where
the desktop admins are located.