Posted on 2011-10-30
Medium Priority
Last Modified: 2012-05-12
Hello, I'm looking for someone to recommend a tried and tested utility/method of devolving password resets to trusted users. Specificaly I'm looking to be able to allow these users to reset passwords of students from their own desktop that have forgoted their domain logon without the need to send them to the IT department. It would need to be tied down to specific organisational units/containers so each trusted user can reset passwords of students in their courses.

Any ideas?
Question by:Aelara
  • 3

Accepted Solution

bill_lynch earned 2000 total points
ID: 37053034
You can delegate rights to the Organization Unit to allow for password resets.  Then you can create a .msc for those users to use on their desktops so that they can only see their organizational units.


Author Comment

ID: 37056049
Thanks, What do I need to do/install on the local Windows 7 workstation to get this .mmc to work? As it stands it will not work from a domain workstation.

Thanks, Aelara.

Author Comment

ID: 37056096
Sorry, .msc, Work fine on the DC, Delegation permissions changed on the container, When run from a workstation i get 'MMC coyld not create the snap-in"


Author Comment

ID: 37056596
Got it to work on one of the delegated users workstations by installing the admin pack. How do i go about disabling the right click feature/menu items when clicking on a user within the .msc? Although most features are disabled these users can right click, select move a user and a pop up window of the entire directory structure is available for them to browse. Is this the best i can get? All I want is a password reset facility and no other information about the domain.

regards, aelara.

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question