Solved

Install Active Directory Users and Computers on Desktop PC with Password reset and unlock access

Posted on 2012-04-10
8
610 Views
Last Modified: 2012-04-22
Our Servers are
Windows Server 2008 R2 Starndard 64 bits

All Desktops are
Windows 7 32 bits

I want to Install Active Directory Users and Computers on Desktop PC with Password reset and unlock rights only on one of my staff's machine.

How can i do it?

Thanks in advance.
0
Comment
Question by:propertyozadmin
  • 2
  • 2
  • 2
  • +1
8 Comments
 
LVL 11

Expert Comment

by:g000se
ID: 37830634
Hi, install AD tools on the computer.  In the AD group policy modify it to limit the staff to password reset and unlock rights.
0
 
LVL 21

Expert Comment

by:motnahp00
ID: 37830641
You will have to install RSAT to get ADUC on a workstation.

As for the password reset, delegate control on the OU and grant a user or security group "Reset user passwords and force password change next logon" permissions."
0
 
LVL 11

Assisted Solution

by:g000se
g000se earned 250 total points
ID: 37830669
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 

Author Comment

by:propertyozadmin
ID: 37831154
Thanks Guys,

I have mananged download RSAT and installed on my desktop.( My login is member of domain admin group)

I think i will have no problem installing it on user's PC who is not domain administrator.
I am still not sure how to restrict that user to be able to just reset password and unlock account of other users. (really need to make sure he can't delete users and make other changes)

Do i need to set it up on domain Group policy ??
How do i set it up?

Help pls
0
 
LVL 2

Expert Comment

by:robdl
ID: 37832006
I would shy away from installing RSAT on users desktops and giving them ANY access to ADUC. There are plenty of affordable and free Password Self Service solutions available.

If you enable users in AD to be able to change their own passwords, they can do it right from the login screen by clicking on 'Reset Password' (unlocking an account does not work).

If I may reccomend a product, I've been using Anixis Password Reset. It's definitely affordable.

http://anixis.com/products/apr/default.htm
0
 
LVL 21

Expert Comment

by:motnahp00
ID: 37832025
You do not need a GPO. Delegate control on the OU and grant a user or security group "Reset user passwords and force password change next logon" permissions.
0
 

Author Comment

by:propertyozadmin
ID: 37835367
Hi robdl / motnahp00,

Thanks for your suggestions.

But,
I think i didn't make myself clear. I want to install RSAT on just 1 user's computer so he can reset/unlock account for all users with our organisation. I want him to be point of contact for all our staff in case of account lock out or if password reset requied. But i need to make sure he can't make any other changes through Active directory uses and computer.

Suggestions Please....
0
 
LVL 2

Accepted Solution

by:
robdl earned 250 total points
ID: 37836853
Only install the necessary components through RSAT and give him the permissions on each container through Delagate Control. Here is a link that applies to 2008 also:

http://technet.microsoft.com/en-us/library/cc775585(v=ws.10).aspx
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
How to record audio from input sources to your PC – connected devices, connected preamp to record vinyl discs, streaming media, that play through your audio card: Vista, Windows 7, Windows 8, Windows 8.1 and Windows 10 – both 32 bit & 64.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question