Delegation of Control Wizard
Posted on 2007-09-29
I have two problems.
My network is at a school, and what i want is to allow my Teacher users to reset the passwords of my students, but not administrators passwords. I have 3 OUS
3-Students - under that OU are OU's for their year groups eg. Year 7
if i use delegation of control wizard on a teacher account i found that they can only control users in their OU. is there a way of allowing them to control users in the STUDENT OU without moving them out of the TEACHERS OU as this would change the security permissions such as what they can access?
Also i would like to create an account called BUILDXP that has permission to add a computer to the domain without making the account an Administrator and without putting it in a OU with computers as i have different OUs for teacher and student pc's.
can anyone help?