Computing.Net > Forums > Windows Server 2003 > Admin Rights

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Admin Rights

Reply to Message Icon

Name: rajoo_sh
Date: April 14, 2008 at 21:35:00 Pacific
OS: win2k3 server
CPU/Ram: core 2 duo 2.2
Product: Intel (assembled machine)
Comment:

Hi,

In a win2k3 domain I want to assign only the domain user's password reset rights to a user, I don't want this user to even view the group policy of the organizational unit. And if possible the other properties of the user object, I want only the password reset option available or something very restrictive.

Regards



Sponsored Link
Ads by Google

Response Number 1
Name: Jestible
Date: April 15, 2008 at 08:02:03 Pacific
Reply:

Huh, can you rephrase it or am I to slow to understand this question?

Holy Wow.


0

Response Number 2
Name: lordstorm
Date: April 15, 2008 at 12:53:08 Pacific
Reply:

you can set each user to have the ability to renew their own password and you can also force the user to reset their password when they login the next time. This is all done in the Active Directory/User Properties/Account Tab/Account Options.


0

Response Number 3
Name: rajoo_sh
Date: April 15, 2008 at 22:11:17 Pacific
Reply:

Off course I can rephrase it, I want to create an admin user who can reset passwords of other users in any Organizational unit using dsa.msc.

But this admin user should not be able to view the group policies or perform any other action except this password reset.

Its better I hope :-)


0

Response Number 4
Name: Glen
Date: April 16, 2008 at 09:56:00 Pacific
Reply:

You can delegate admin rights to users. Open ADUC and right click on the OU. You'll have to do this per OU if you have several. Select Delegate Control. Go through the wizard. There is an option there that will only allow the resetting of passwords.

Good luck.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Server 2003 Forum Home


Sponsored links

Ads by Google


Results for: Admin Rights

Multi-Domain Enterprise Admin Right www.computing.net/answers/windows-2003/multidomain-enterprise-admin-right/3818.html

Domain admin rights? www.computing.net/answers/windows-2003/domain-admin-rights/4077.html

Giving user admin rights www.computing.net/answers/windows-2003/giving-user-admin-rights/6482.html