RE: Problems reseting password using MMC

From: ptwilliams (ptw2001_at_hotmail.donotspam.com)
Date: 03/16/05 

Date: Wed, 16 Mar 2005 07:25:07 -0800

The first thing to do is to check what permissions you've set with the
delegation of control wizard.

To do this, click the view drop-down list in ADU&C and choose advanced.
Then right-click on the container that you delegated control to and choose
properties then security then advanced.

Now look at the permissions applied to the user/ group that you delegated
control to. Look at both tabs.

Let us know exactly what permissions are applied and to what scope, i.e.
reset password on this container only, etc.

With this information we can see if you've delegated the appropriate
permissions or not. 

--
Paul Williams
http://www.msresource.net/
http://forums.msresource.net/

Relevant Pages

  • Re: User Access Denied With DHCP Admin. Group?
    ... There are two main ways of delegating control in Active Directory - using ... permissions on the object or parent object. ... through the Delegation of Control Wizard or the Sites and Services advanced ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to set permissions to allow user to edit AD
    ... I have also found a white paper on AD delegation to give me more context. ... > Drill down to the Container which holds the accounts you want the user to ... > earlier - Right Click and select the Custom Taskpad option in order to ... > the container you delegated permissions to. ...
    (microsoft.public.windows.server.sbs)
  • Re: Delegating Control...
    ... I know how to do the Delegation of Control, but the descriptions of all the ... permissions are not very good. ... Harrison Midkiff ...
    (microsoft.public.win2000.active_directory)
  • Re: Remove Domain Admins ability from "Delegation Of Control"
    ... This delegation should only work if you have the security credentials to ... Another thing that would come along as you start to play with permissions ... > of Control wizard in the Active Directory Users and Computers Microsoft ... you must be a member of the Domain Admins ...
    (microsoft.public.win2000.active_directory)
  • GPO to Solve this Issue
    ... problems but in this case the permissions are set up so that Everyone has ... full control on the share permissions and the NTFS permissions are set so ... Can anyone shed any light on the ACTUAL workings of the home folder mapping ...
    (microsoft.public.windows.server.active_directory)
Loading