Re: AD users and computers for Helpdesk

Hello Neil,

Even if you install adminpak to the workstation, if they are normal users, they can't do anything except you gave them the rights on your domain to do it. They can only view. You can also extract tools from the adminpak to use them alone and not install the complete adminpak on the clients.

http://www.petri.co.il/extract_specific_tools_from_adminpak_msi.htm

http://support.microsoft.com/kb/230263

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

Hi Anthony and others

Hi,

I mistyped saying "they can login to the server and access ADMINPAK".
Sorry, I meantlogin and access AD Users and Computers.

Well,allthat I am trying to achieve is not to install adminpak on
helpdesk computerrs, instead I want a single place where Helpdesk can
go and access AD Users and Computers. By installing AD Users and
Computers on helpdesk machine it is simple for them so that they can
configure it in MMC and reset passwords or create user accounts. But,
I thought this might be a security risk, (even though they might be
delegated to do certain jobs). So, my other idea was to install AD
Users and Computers on another server which is not a domain controller
and request the helpdesk folks to login to the server and access AD
Users and Computers to reset passwords. I hope I am clear in this
paragraph.

"Anthony" wrote:

Hi Neil,

What are you trying to achieve? MMC is a good way to access ADUC.
Remote

Desktop is an unneccesary but possible way to use it. There are third
party

interfaces. It depends what you want. Or are you perhaps thinking of

taskpad?

http://technet2.microsoft.com/windowsserver/en/library/7f5ea82e-717d-
4d39-948e-33e78c31b8ed1033.mspx?mfr=true

Anthony, http://www.airdesk.co.uk

"Neil" <Neil@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:361FC73C-3D97-4646-934E-69044F8CE595@xxxxxxxxxxxxxxxx

Hi, Is there a way we could ensure helpdesk can access AD Users and
Computers
from there desk other than installing adminpak on their machines. I
have
done
where Helpdesk can access a server where adminpak is installed and
then
reset
users password and create accounts. Is there any otherway other
than
this.
thanks in advance



.

Relevant Pages

  • Re: adminpak.msi and other mmc questions
    ... as for the adminpak, you can only install it on the 'matching' client OS ... Considering the adminpaks have to match OS client & server versions I assume ... > Microsoft MVP - Windows Security ...
    (microsoft.public.windows.server.general)
  • Re: view members of security groups from workstations?
    ... For example you can install the Adminpak and install it on the XP, thenuse the Active Directory Users and computers to get that info. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADMINPAK
    ... > We have a freshly formatted XP Pro computer with SP1 installed and no ... However we are unable to install the latest release of adminpak ... >> uninstall SP1 ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Admin Tools
    ... I understand what you said up to getting Adminpak for XP ... The adminpak.msi from the W2K server CD wouldn't ... install on the XP workstation. ... get the tools that aren't included in XP adminpak beta 3? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: ADMINPAK
    ... We have a freshly formatted XP Pro computer with SP1 installed and no ... However we are unable to install the latest release of adminpak ...
    (microsoft.public.windowsxp.security_admin)