Posted on 2011-10-30
Last Modified: 2012-05-12
Hello, I'm looking for someone to recommend a tried and tested utility/method of devolving password resets to trusted users. Specificaly I'm looking to be able to allow these users to reset passwords of students from their own desktop that have forgoted their domain logon without the need to send them to the IT department. It would need to be tied down to specific organisational units/containers so each trusted user can reset passwords of students in their courses.

Any ideas?
Question by:Aelara
    LVL 9

    Accepted Solution

    You can delegate rights to the Organization Unit to allow for password resets.  Then you can create a .msc for those users to use on their desktops so that they can only see their organizational units.

    Author Comment

    Thanks, What do I need to do/install on the local Windows 7 workstation to get this .mmc to work? As it stands it will not work from a domain workstation.

    Thanks, Aelara.

    Author Comment

    Sorry, .msc, Work fine on the DC, Delegation permissions changed on the container, When run from a workstation i get 'MMC coyld not create the snap-in"


    Author Comment

    Got it to work on one of the delegated users workstations by installing the admin pack. How do i go about disabling the right click feature/menu items when clicking on a user within the .msc? Although most features are disabled these users can right click, select move a user and a pop up window of the entire directory structure is available for them to browse. Is this the best i can get? All I want is a password reset facility and no other information about the domain.

    regards, aelara.

    Featured Post

    Live: Real-Time Solutions, Start Here

    Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

    Join & Write a Comment

    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    A quick step-by-step overview of installing and configuring Carbonite Server Backup.
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now