Re: Delegation - Password Reset - Access Denied

Don't ever place a user in any of the Administrative groups unless you are
willing to provide them administrative privileges.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"TimJM" <TimJM@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F6B45477-9F43-40F7-BA6F-E328192739D3@xxxxxxxxxxxxxxxx
I have setup a group as delegate to an OU. This group has Create, delete,
Manage User accounts & Groups, Reset user password, read all user info,
and
Modify Group Memebership.

I have setup a custom TaskPad for them to use. When a user in this group
tries to Reset a Users Password the get an Access Denied error. I read in
another post on this group that that group needs to be in the
Administrators
group. Doesn't this defeat the whole purpose of deligating control?

When I do add this group into the Admins Group a user of that group can
Reset Passwords. Am I missing something?

TimJM


.

Relevant Pages

  • Creating Administrative Workspace for Password Reseting - Compile
    ... can change their passwords and administrators can reset lost passwords. ... Public Sub ChangeResetPassword(StrAction As String, ... If The StrAction passed to the ...
    (microsoft.public.access.security)
  • Re: Everyone vs Self
    ... that doesn't give everyone the ability to reset the administrators ... using admin pack to administer passwords for staff I really don't want ...
    (microsoft.public.windows.server.active_directory)
  • Re: Users Password.
    ... Administrators can ... just reset the password. ... Hari ... SQL Server MVP ...
    (microsoft.public.sqlserver.clients)
  • Re: administraors account
    ... If you have an available account with administrative privileges, ... (any account belonging to the administrators group) ... control userpasswords2\select the administrator\click on "Reset ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Delegation - Password Reset - Access Denied
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Manage User accounts & Groups, Reset user password, read all user info, ...
    (microsoft.public.windows.server.active_directory)
Loading