Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
Active Directory Object Security
Name: Mattbailey53 Date: April 27, 2004 at 13:29:21 Pacific OS: Windows 2000 CPU/Ram: xeon \ 1gb
Comment:
I work in a school and I am trying to allow teachers to access to change passwords of the students. I have applied the correct security settings on the OU in which all the students are stored to allow the 'teacher' group to change passwords. However, the security is only being placed on the OU and not on the user objects. I have looked at the security of the users and none of them have the 'allow inheritable permissions from parent to propagate to this object' ticked. There are about 1800 user accounts. Is there any way of changing all the boxes so they are ticked??
Name: antoeknee Date: April 27, 2004 at 15:58:17 Pacific
Reply:
That seems to be the wrong way round to me don't you need a group that has the password reset option that contains all the teachers.
If you apply to the users it allows the users to change the password.
What you could do is delegate the control.
highlight the OU then from the action menu select delegate control (this starts a wizard) select the users or group you want to delegate control to. When you select next you'll see common tasks listed one is reset passwords.
After that you could make it easy for the trachers by giving them a taskpad (customised MMC) with the password rest as an action.
0
Response Number 2
Name: Mattbailey53 Date: April 28, 2004 at 00:04:03 Pacific
Reply:
I have tried to delegate control but none of the user objects are inheriting. I have written a vbscript for the teachers to change passwords.
0
Response Number 3
Name: antoeknee Date: April 28, 2004 at 13:46:42 Pacific
Reply:
You should delegate to the teachers OU not the users
Summary: hi..i have a problem creating a UAO user account object in server2003 Active Directory..says Windows cannot create the password for * because the password doesnot meet the password policy requirement...
Summary: Sadly there isn't enough space here to tell you what it is, suffice to say it is a Directory service that allows the storage of all objects which can be searched on. That is its most basic basic funct...
Summary: I have recently set up active directory on my win 200 server, i am able to access things like users and compuers and sites and services and i can ping the domain controller from other computers on the...