Discussion Locked

Password Changers Group

0 helpful
8 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I would like to have a group of users, be able to change passwords for other users. How can I implement this without giving out too much access?

Can I make a special MMC to give to each user for this access?

I need good instructions or point to a good articale.

Thanks
TM.

8 replies

by jim.kam

On Win2k Professional, the password changer group will be power users under ‘group’ in computer management. And on the Win2k Server, the password changer group will be account operator under ‘Builtin’ in AD users and computers. You don not need to create special mmc to them because these user groups cannot perform any further configurations like changing IP address, install drivers, add/remove program, etc. These group were design to give them only sufficient to manage user.

Have a nice day! 8)

by metallica

Put the users that you want to change the passwords in an ou.Now right click on the ou and choose delegate control then next and add now choose the group or user that you want to give permission to reset passwords and ok and next.Now click on the radio button only the following objects in this folder and scroll down to user objects and check the box and hit next and scroll down to change password and check the box then hit next confirm and finish.
If you look around on some of the settings youcan delegate as little or as much control as you want

This discussion is closed to new replies.