<div>
Create a custom taskpad and distribute it to the users in question: <a href="http://www.petri.co.il/create_taskpads_for_ad_operations.htm" rel="ugc">http://www.petri.co.il/create_taskpads_for_ad_operations.htm</a>
</div>


<div>
How does the person that I have given the rights get to the password information from their XP machine. &nbsp;Do i run this mmc on the XP machine or do i do it on the domain and does the user with the rights have to access the domain?
</div>


<div>
&gt; &quot;How does the person that I have given the rights get to the password information from their XP machine&quot;<br />
<br />
This question does not make sense based on your original post. If you have delegated permissions to reset passwords to UserX, as you described, then UserX will be able to run the MSC when logged onto any workstation, regardless of operating system.
</div>


<div>
I tried this from the user machine and did not see the Active Directory User and Computers so I could not select it. &nbsp;Was i in the wrong place
</div>


<div>
OK I will try that and see what happens and when I do this I should be able to run the MMC and do what I need to do<br />
Thanks
</div>


<div>
the helpdesk person can now change passwords by doing the delegated wizard but he can not force to change at next login because it is grayed out. &nbsp;Is there a way to allow this and to unlock locked accounts
</div>


<div>
These are separate permissions. You need to re-run the Delegation of Control wizard and delegate the permissions to unlock an account and set the &quot;must change...&quot; flag, as described here: <a href="http://support.microsoft.com/kb/296999" rel="ugc nofollow">http://support.microsoft.com/kb/296999</a>
</div>


<div>
I will try that again but I thought I tried that and when I set it back with the enable the permissions were not there
</div>


<div>
i will try them again this afternoon
</div>


<div>
I am using win2000 and when i did the start run and typed in dssec.dat it asked me what did i want to open it with
</div>


<div>
sorry disregard i think i found the answer
</div>


<div>
I tried the link above and the first part says to disable and then do the steps and run delegate wizard and I can see the rights there but when I go to enable the filter per the last step the rights are taken away &nbsp;<br />
Any help on this would be appreciated
</div>


<div>
should i not enable the filter after I disabled it
</div>


<div>
<div class="content wysiwyg-content">
I did the delegation wizard and assigned the rights to a group and I need to know how to get a user from the group to do a password reset from their Windows XP workstation &nbsp;I am running windows 2000
</div>
</div>


I did the delegation wizard and assigned the rights to a group and I need to know how to get a user from the group to do a password reset from their Windows XP workstation  I am running windows 2000

give rights to change password to heldesk

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.