After Hours

Ask something
Question Locked

Active directory (password reset's)

0 helpful
7 replies

by malmc37

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Is there any way in active directory that ICT technicians can change users password without being builtin administrators or domain admins. I manage a domain, recently alot of users are forgetting there passwords (reason off on holiday, when they return they cant remember there password), i need a solution that ICT technicians can reset passwords in an OU, but cant change Domain admins, Domain Administrator and other important accounts

7 replies

by cg it

This is a link on delegating password reset and some problems with the delegation, however this article does have the how to steps on setting up delegating authority to reset passwords to a defined group. In this article, that group is named Help Desk.

http://support.microsoft.com/kb/296999/en-us

by hell-bent

Hi,

Your problem is referred to granular distribution of permissions and user self-service. Softerra Adaxes solution will help (http://www.adaxes.com)

Thank you.

by purpleskys

over two year old post...and i almost think it's spam to boot

by frank_h

Delegation of appropriate rights in AD is the simplest solution for your help desk staff, however, you'll still need to give them access to an Active Directory Users and Computers MMC. This is not always appropriate.

I would suggest delegating appropriate rights to a help desk AD group and then give the members of that group a low cost locked-down management tool like Account Manager from www.sysoptools.com - This way your staff has only rights to do what they need, can do it quickly, and they can only see what they need to see in AD. Plus all activities are audited.

Taking this further, why not give your users ability to quickly / securely self service their own password changes / resets and account unlocks? Check out Password Reset PRO self service software from www.sysoptools.com - It totally rocks in terms of easy to use, easy to deploy, and high security. Plus, if you buy it you get the Account Manager app for free. Very sweet deal. Most universities and gov entities are using this software, which is how I found out about it.

by piyush.agrawal

Well, more than 30% of the administrators calls are for password reset only. Its better to use a software which allows the user to reset the password by himself or through his colleague.

I'll sugest using Lepide Active Directory Self Service. The software pretty easy to use besides being rich in features so that any one who does not have much knowledge of the Active Directory or the software itself, can use it without any problems.

For more information you can mail me at piyush@lepide.com

This discussion is closed to new replies.