• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 296
  • Last Modified:

Give a user access to reset password and manage accounts.

WE have SBS 2011 with about 20 users. The manger wants to be able to change/reset someone's password if the IT guy is not around. Is there anyway to do that with the least amount of access/right? Can I somehow have him to that by installing AD users and domains on his XP computer and only limite his access to the OU that the suers are in?
Thank you,
0
netcomp
Asked:
netcomp
2 Solutions
 
JohnGrunwellCommented:
On the OU where the user should get the permission, rightclick the OU and
choose "Delegate control" wizard
0
 
authen-techCommented:
He has to be a domain admin to allow him access to manage other user accounts.  This means he will inherently have access to pretty much everything.  You need to decide if he should be trusted enough to log in as an admin.  Don't give him the admin account, but I'd bump him user to admin to allow you to drop him down from a domain admin later if needed.  Just be sure he knows he is only to access that one thing.  The only way to install A/D on a computer is to have it run a server OS and act as a domain controller.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now