asked on

Reset Password Delegation

We would like an individual from each one of our departments to have the right to reset passwords for members of their respective departments during off hours. We have an OU for each department and we're going to use the delegation wizard at the OU level to reset passwords. My question is, do these users need access to Active Directory Users and Computers to reset these passwords? I would imagine so...

If so, I was thinking I could set up a GPO which will push out the Windows 2000 Support Tools on the desktop of the assigned people? From there, they could launch ADUC's?

Does this make sense? Is there a better way?

Thanks

mikeleebrla

yes the would need the admin tools in order to do this. you posted this question in the windows 2003 server area, but then you say you want to push the 2000 support tools to the users. what kind of domain do you have 2000 or 2003? what OS do your clients have? After knowing that we can tell you what your clients will need to install in order to manage their OU.

msadexchman

ASKER

Thanks.

AD = 2003

OS = XP and 2000 Professional

mikeleebrla

on xp clients just install the adminpak.exe that is on the server 2003 CD. If you don't have the server CD you can download it from the internet.
on 2000 clients im pretty sure you can install the same version ( you might get an error but just ignore it)

2003 version:
http://www.microsoft.com/downloads/details.aspx?FamilyID=C16AE515-C8F4-47EF-A1E4-A8DCBACFF8E3&displaylang=en

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q314978

ASKER CERTIFIED SOLUTION

Netman66

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial