Solved

Non-Admin User Change AD Passwords

Posted on 2013-01-15
2
1,003 Views
Last Modified: 2013-01-16
In a school, thousands of student accounts.  They may be smart in math, but not in remembering their passwords!!  Is there a way to give a teacher, maybe a script, that would do something like:

change_pwd username newpassword

Since they won't know the old password!  The teachers are not admins or domain admins and I want to keep it that way.  

Windows 2008R2 servers, XP and Win 7 clients.
0
Comment
Question by:dougp23
2 Comments
 
LVL 93

Expert Comment

by:John Hurst
ID: 38781035
A user can change their own password (if option is checked in AD) and if they know their current password.

Otherwise non-admins *cannot* change passwords. Else havoc would ensue.

Sorry. ... Thinkpads_User
0
 
LVL 13

Accepted Solution

by:
upalakshitha earned 500 total points
ID: 38781050
delegate password reset permissions to your require users using Delegation of Control Wizardn Active Directory.  http://community.spiceworks.com/how_to/show/1464-how-to-delegate-password-reset-permissions-for-your-it-staff

then use this free GUI tool to reset passwords.  http://www.burconix.com/?p=software-teacher-reset-student-passwords-free-tool

poweshell also can use to reset passwords. but they are non technical use above method
http://msgroups.net/microsoft.public.windows.powershell/change-ad-user-password/86249

Powershell script to reset multiple AD passwords  http://social.technet.microsoft.com/Forums/eu/winserverpowershell/thread/1636a440-b2b0-4e87-ba0b-f91ac3b75535
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question