Solved

Special Desktop Tech rights in active dir., need to change ability to force password change.

Posted on 2011-09-27
2
229 Views
Last Modified: 2012-05-12
Greetings,

I am a new employee in an IT department. Not new to IT, just this company.
I was given an assignement to fix or edit a security group policy.
The name of the policy is:  PasswordChange.
This was created so the desktop techs can reset domain passwords.
the problem, in the pop-up window to reset a password, there is the small check box to force the user to reset change their password at next login.
This is greyed out for these tech users. *See attached pic*

I need to find out how to enable this function for these guys.

Thanks in advance.

 PassChange
0
Comment
Question by:Hystorm
2 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 125 total points
Comment Utility
That is usually not done through a group policy.  That is done using the delegation control wizard or the ACLs in AD.  See screenshot.

Thanks

Mike
DelegateControlPW.jpg
0
 

Author Closing Comment

by:Hystorm
Comment Utility
Whoohoo...
You Da Man!

Worked perfectly!

Thanks much!
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
Ever wondered why Windows 8 and 10 don't seem to accept your GPO-based software deployment while Windows 7 does? Read on.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now