Computing.Net > Forums > Windows 2000 > Active Directory Object Security

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Active Directory Object Security

Reply to Message Icon

Name: Mattbailey53
Date: April 27, 2004 at 13:29:21 Pacific
OS: Windows 2000
CPU/Ram: xeon \ 1gb
Comment:

I work in a school and I am trying to allow teachers to access to change passwords of the students. I have applied the correct security settings on the OU in which all the students are stored to allow the 'teacher' group to change passwords. However, the security is only being placed on the OU and not on the user objects. I have looked at the security of the users and none of them have the 'allow inheritable permissions from parent to propagate to this object' ticked. There are about 1800 user accounts. Is there any way of changing all the boxes so they are ticked??




Sponsored Link
Ads by Google

Response Number 1
Name: antoeknee
Date: April 27, 2004 at 15:58:17 Pacific
Reply:

That seems to be the wrong way round to me don't you need a group that has the password reset option that contains all the teachers.

If you apply to the users it allows the users to change the password.

What you could do is delegate the control.

highlight the OU then from the action menu select delegate control (this starts a wizard) select the users or group you want to delegate control to. When you select next you'll see common tasks listed one is reset passwords.

After that you could make it easy for the trachers by giving them a taskpad (customised MMC) with the password rest as an action.


0

Response Number 2
Name: Mattbailey53
Date: April 28, 2004 at 00:04:03 Pacific
Reply:

I have tried to delegate control but none of the user objects are inheriting. I have written a vbscript for the teachers to change passwords.


0

Response Number 3
Name: antoeknee
Date: April 28, 2004 at 13:46:42 Pacific
Reply:

You should delegate to the teachers OU not the users


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 2000 Forum Home


Sponsored links

Ads by Google


Results for: Active Directory Object Security

Windows2000/2003 Active Directory www.computing.net/answers/windows-2000/windows20002003-active-directory/49650.html

Active Directory?? www.computing.net/answers/windows-2000/active-directory/24384.html

active directory www.computing.net/answers/windows-2000/active-directory/38755.html