Software

Ask something
Question Locked

AD Object Modification by Non-administrators

0 helpful
3 replies

by mhashemi

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I'm looking for help creating some kind of interface so team managers can change the AD passwords of their team members.

Our OUs are setup so that reps and managers are in OUs based on where they sit in the building. Ideally, the interface would check what OU a manager's AD object is in and would only allow them to change the passwords for reps in that OU.

I need some way other than an installation of the AD tools for managers to make the changes. I'd be great to have some kind of web page they can go to.

Can anyone provide any help? Thanks a lot.

3 replies

by bart777

Go to the OUs that you want to do this with and right click the OU folder.
Select Delegat Control.
Once in this screen you can choose teh users/groups who have the rights and what rights you wish to give them.

Fairly easy to setup. Just be careful who you give permissions to. Make sure they know what they are doing. Thins just takes a little training of the users in question.

Have fun.

by mhashemi

Thanks for the reply. I know about delegation in AD. What I need is some way to allow these team managers to change passwords without knowing they're in AD.

I envision something like a web page where the manager logs in using their AD credentials and a drop down list of the reps they can change the password for is generated. Then they enter the new password and click submit. Or they double click some script file and type a username and password. If the username doesn't match someone they can manage, the password doesn't get changed.

Thanks.

This discussion is closed to new replies.