Restrict user

From: Steve (anonymous_at_discussions.microsoft.com)
Date: 02/12/04 

Date: Thu, 12 Feb 2004 08:05:09 -0800

Here is my goal. Have a generic user logged into my
domain controller that only has the permission to reset
passwords for user accounts in Active Direcoty. I want to
have this user logged in to the domain controller at all
times and utilize the "run as" command to log on to do
more major administration tasks such as administer group
policies, created groups and Ou's etc. Whats the best way
to go about setting up this user to only be able to reset
passwords?

    Thanks in advance

Relevant Pages

  • Re: Restrict user
    ... > passwords for user accounts in Active Direcoty. ... > have this user logged in to the domain controller at all ... > more major administration tasks such as administer group ...
    (microsoft.public.win2000.active_directory)
  • RE: Single sign on
    ... How to authentificate an user via telephon? ... > Avatier has a product which would allow users to reset their own passwords ... >> for the person whose account is reset. ... >> would only be accessible by the person whose account is reset. ...
    (Security-Basics)
  • Re: oops there goes my Domain controller
    ... There is no need to know the "local" admin password, on a DC it is the administrator password for "Active directory restore mode" which can be reset with "Setpwd" in 2000: ... wc.com from domain controller wespac to domain controller wddc01: ... numerous things can contribute to this from DNS ... Server) Service being disabled, using your ISP's DNS, your router as ...
    (microsoft.public.windows.server.active_directory)
  • Re: Hacked
    ... *consider, having every user reset his/her passwords, and reset all service accounts. ... I've done a full scan and the server is clean. ...
    (microsoft.public.security)
  • Re: Hacked
    ... *consider, having every user reset his/her passwords, and reset all service accounts. ... I've done a full scan and the server is clean. ...
    (microsoft.public.security)
Loading