• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 690
  • Last Modified:

W2K8 SERVER AD PASSWORD RESET UTILITY FOR TRUSTED USERS

Hello, I'm looking for someone to recommend a tried and tested utility/method of devolving password resets to trusted users. Specificaly I'm looking to be able to allow these users to reset passwords of students from their own desktop that have forgoted their domain logon without the need to send them to the IT department. It would need to be tied down to specific organisational units/containers so each trusted user can reset passwords of students in their courses.

Any ideas?
0
Aelara
Asked:
Aelara
  • 3
1 Solution
 
bill_lynchCommented:
You can delegate rights to the Organization Unit to allow for password resets.  Then you can create a .msc for those users to use on their desktops so that they can only see their organizational units.

http://www.itedge.net/blog/2006/03/07/active-directory-delegate-reset-password-unlock-account/
0
 
AelaraAuthor Commented:
Thanks, What do I need to do/install on the local Windows 7 workstation to get this .mmc to work? As it stands it will not work from a domain workstation.

Thanks, Aelara.
0
 
AelaraAuthor Commented:
Sorry, .msc, Work fine on the DC, Delegation permissions changed on the container, When run from a workstation i get 'MMC coyld not create the snap-in"

Thanks.
0
 
AelaraAuthor Commented:
Got it to work on one of the delegated users workstations by installing the admin pack. How do i go about disabling the right click feature/menu items when clicking on a user within the .msc? Although most features are disabled these users can right click, select move a user and a pop up window of the entire directory structure is available for them to browse. Is this the best i can get? All I want is a password reset facility and no other information about the domain.

regards, aelara.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now