Re: Taskpad Setup??

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



"WetBehindEars" <WetBehindEars@xxxxxxxxxxxxxxxxxxxxxxxxx>...
>I would like to setup a taskpad on a few workstations so we can reset user
>accounts from our desks. I go into the mmc and add AD >users. I go to
>create the taskpad and I cant seem to set up the correct parameters to
>allow for a reset user account task. I have followed >the wizard and it
>still wont show up. Any suggestions on setting this up?

Make an OU for your users who will be restting passwords. Then, give OU
permissions to change or reset a user passwords.

Right-click on the OU in ADU&C snap-in and click on Properties
Click on the Security tab
Add the proper group to the list of names at the top, then click Advanced at
the bottom
Highlight group's name in the list and click on Edit
In the Object tab, change the Apply Onto section to "User Objects"
The defaults given to groups are: List Contents, Read all properties, Read
Permissions
Apply the appropriate permissions accordingly: Change Password, Reset
Password
To give OU permissions to change or reset a computer password,

Right-click on the OU in ADU&C snap-in and click on Properties
Click on the Security tab
Add the proper group to the list of names at the top, then click Advanced at
the bottom
Highlight group's name in the list and click on Edit
In the Object tab, change the Apply Onto section to "Computer Objects"
The defaults given to groups are: List Contents, Read all properties, Read
Permissions
Apply the appropriate permissions accordingly: Change Password, Reset
Password
To give OU permissions to create or delete a computer object,

Right-click on the OU in ADU&C snap-in and click on Properties
Click on the Security tab
Add the proper group to the list of names at the top, then click Advanced at
the bottom
Highlight group's name in the list and click on Edit
In the Object tab, change the Apply Onto section to either "This Object
Only" or "This Object and All Child Objects"
The defaults given to groups are: List Contents, Read all properties, Read
Permissions
Apply the appropriate permissions accordingly: Create Computer Objects,
Delete Computer Objects

--
Todd J Heron, MCSE
Windows Server 2003/2000/NT; CCA
----------------------------------------------------------------------------
This posting is provided "as is" with no warranties and confers no rights

.



Relevant Pages

  • Re: Delegation Wizard
    ... On the Security tab, ... the Create Computer Objects and Delete Computer Objects ACEs, ... Password" rights for computer objects. ... > I know this is because they don't have permissions for the object in the> container which it resides but I only want to delegate the permissions> necessary for their account to rename the new build without error. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Adding workstations to domain
    ... group to add computer accounts to the domain but no other users on the ... You can also grant these permissions on an OU to a group, ... click the Security tab (Advanced features may need to be enabled ... View/Edit, on the Apply onto pulldown select Computer objects, and allow the ...
    (microsoft.public.windows.server.active_directory)
  • Re: receiving access denied message on all folders in logical pa
    ... In order to access the security tab in XP Home edition you're ... ownership. ... >> Administrator account (e.g. it may be called Administrator, ... >> Review the listed permissions configuration and adjust as ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP Pro -> Vista: You do not have access ... See administrator (was XP -> Vista: You do n
    ... In case it might make some difference the Vista machine ... On the XP Pro machine when I click on "My Network Places" the ... sharing option is used it only sets the share permissions. ... Select the Security Tab in the displayed properties sheet. ...
    (microsoft.public.windows.vista.networking_sharing)
  • Re: What happens to the machine name in AD?
    ... The user needs Write permissions on the computer object to modify all ... usually grant these rights on the OU that contains the computer objects. ...
    (microsoft.public.windows.server.active_directory)