Solved

Server 2012 permissions

Posted on 2014-03-22
2
211 Views
Last Modified: 2014-03-24
Hi, we have a third party company which looks after our 2nd level support for our server, and naturally they have to have admin rights to perform this task. However, is it possible to set it up that they can't reset passwords for users?
0
Comment
Question by:maxkelpie
2 Comments
 
LVL 39

Assisted Solution

by:Kyle Abrahams
Kyle Abrahams earned 250 total points
ID: 39948244
You can create a local admin account or grant their domain account local admin priveleges on the box in question.  They'd be able to reset passwords for local users on that box but not domain users.
0
 
LVL 28

Accepted Solution

by:
becraig earned 250 total points
ID: 39948251
You can group them all in one OU and then delegate permission to only reset passwords on their own OU.

Open ADUC  right click on OU you created and click on delegate control
Then follow the delegation control wizard to delegate the required permission (in this case password reset)
Simply click the button only the following object and check the users in that OU, then once in the permissions screen check the required option change password, reset password etc.

The wizard should be pretty intuitive.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Recently, I was assigned the task of performing a hardware refresh in the datacenter. The previous Windows 2008 systems were connected to the SAN via fiber channel HBA’s and among other thing, had PowerPath installed in order to provide sufficient f…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now