Give a user access to reset password and manage accounts.

netcomp
netcomp used Ask the Experts™
on
WE have SBS 2011 with about 20 users. The manger wants to be able to change/reset someone's password if the IT guy is not around. Is there anyway to do that with the least amount of access/right? Can I somehow have him to that by installing AD users and domains on his XP computer and only limite his access to the OU that the suers are in?
Thank you,
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
On the OU where the user should get the permission, rightclick the OU and
choose "Delegate control" wizard
He has to be a domain admin to allow him access to manage other user accounts.  This means he will inherently have access to pretty much everything.  You need to decide if he should be trusted enough to log in as an admin.  Don't give him the admin account, but I'd bump him user to admin to allow you to drop him down from a domain admin later if needed.  Just be sure he knows he is only to access that one thing.  The only way to install A/D on a computer is to have it run a server OS and act as a domain controller.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial