Re: Password Reset



In Windows 2000 AD, you can use the Delegation of Control wizard on a domain
or OU to delegate the ability to reset passwords - right-click on the domain
or OU and select "Delegate Control", resetting passwords is one of the
common tasks you can delegate through the wizard.

Delegating the ability to force the user to change their password on next
logon is a bit trickier in 2000, follow this KB:
http://support.microsoft.com/default.aspx?scid=KB;en-us;296999

(In 2003 AD, "Reset password and force password change on next logon" is
wrapped up nicely in the Delegation of Control Wizard.)

HTH


--
Laura E. Hunter: MVP Windows Server - Networking
All replies to newsgroup, please
Post provided as-is, no warranties expressed or implied



"Perry" <Perry@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A8EB22BC-BAD4-49A5-92D2-18985DC9D404@xxxxxxxxxxxxxxxx
>I have a sort of dumb question that I need an answer for. I have a new
>user
> in my office that needs the ability to reset passwords on the network. I
> have a 2000 domain with 2000 servers and 2003 servers istalled. I need to
> give limited access and not sure what rights he needs for this. I'm
> converting from Novell to Windows and need a littl help. Any help or KB
> articles would be great. Thanks.
>
> Perry


.



Relevant Pages

  • Re: Helpdesk rights to change passwords
    ... Delegate "set password" permission to the group you need ... Use AD Users&Computers to reset passwords. ... Windows Server - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegation issues
    ... How To Delegate the Unlock Account Right: ... > they can reset passwords in AD. ... > them to test and gave them the Reset Passwords rights, ...
    (microsoft.public.win2000.active_directory)
  • Re: Delegation issues
    ... >How To Delegate the Unlock Account Right: ... >> they can reset passwords in AD. ... >> them to test and gave them the Reset Passwords rights, ...
    (microsoft.public.win2000.active_directory)
  • Re: Junior Admin
    ... also in the administrators group or other elevated groups. ... You probably will find the entry in advanced/special permissions. ... > them to reset passwords and pretty much nothing else. ... I then used the delegate wizard and added this ...
    (microsoft.public.win2000.security)
  • Re: Best way for users to edit their AD entries?
    ... You can use the Delegate Of Control Wizard at the Domain node and Delegate ... Control for the DYNAMICAL Account SELF, As you have found out SELF are by ... Directory doesn't appears in My Network Places by default since Windows XP, ...
    (microsoft.public.windows.server.active_directory)