Re: Delegation issues

From: Steve (anonymous_at_discussions.microsoft.com)
Date: 03/02/04 

Date: Mon, 1 Mar 2004 17:24:43 -0800

Thanks that worked

>-----Original Message-----
>See the follow KB, sorry for previous post,
>
>How To Delegate the Unlock Account Right:
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;294952
>
>--
>Regards
>Christoffer Andersson
>
>No email replies please - reply in the newsgroup
>
>"Steve" <anonymous@discussions.microsoft.com> skrev i
meddelandet
>news:4f3101c3ffe7$40e42e50$a401280a@phx.gbl...
>> I created a group called MS-Admin for the operators so
>> they can reset passwords in AD. I delegated an OU to
>> them to test and gave them the Reset Passwords rights,
>> but now I noticed that they dont have the rights to
>> unlock an account or check the box for users to change
>> there password when they log in. I have half of what I
>> need how do I get them the rest without giving them the
>> rights to add/delete users.
>
>
>.
>

Relevant Pages

  • Re: Delegation issues
    ... How To Delegate the Unlock Account Right: ... > they can reset passwords in AD. ... > them to test and gave them the Reset Passwords rights, ...
    (microsoft.public.win2000.active_directory)
  • Re: Password Reset
    ... you can use the Delegation of Control wizard on a domain ... or OU to delegate the ability to reset passwords - right-click on the domain ... Delegating the ability to force the user to change their password on next ... > in my office that needs the ability to reset passwords on the network. ...
    (microsoft.public.windows.server.general)
  • Re: Helpdesk rights to change passwords
    ... Delegate "set password" permission to the group you need ... Use AD Users&Computers to reset passwords. ... Windows Server - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Permission to unlock User Accounts
    ... How To Delegate the Unlock Account Right ... rights for the Site Admin user to be able to reset and change passwords but ... Write All Properties Permission they can unlock, but they can do a little ...
    (microsoft.public.win2000.active_directory)
  • Re: Junior Admin
    ... also in the administrators group or other elevated groups. ... You probably will find the entry in advanced/special permissions. ... > them to reset passwords and pretty much nothing else. ... I then used the delegate wizard and added this ...
    (microsoft.public.win2000.security)
Loading