Account Operators

[bradje]

I have made a couple of "helpdesk" people part of the 'Account Operators' group for the domain, so they can reset user's passwords.

But I can't figure out how they are supposed to access the UserManager program for the domain. I wrote a batch file for them to run usermgr on the BDC, and it won't work because it returns "Access Denied". i.e. The users do not have access to the path I typed...\\server\c$\winnt\system32\usermgr.exe

So, how can they bring up User Manager for the domain from their workstations?
TIA,

JB

 

[Aslamvs]

HI,

Copy usrmgr.exe in winnt\syatem32 folder on local workstations. Then try to launch the user manager.




Aslam

 

[neoice]

You have to copy the usrmgr.exe file and all of the necessary dll files to their user area. This way nobody else can use the program. Make sure you set permissions on their user area to admin and themselves.
As you know user manager in the wrong hands can be lethal!

Neil

 

[OzDog]

The reason that they can't access the C$ path on the DC is because that is a Share for Administrators only. Anyone in the Administrators group can access it. On a DC, that means Domain Admins only.

As others mentioned, copy it to a drive they can access.

I'm not sure what neoice was referring to in terms of "the wrong hands" because a user without priveleges can't make changes in User Manager. Just as long as you don't list passwords in the description fields for important accounts!!.

Cheers,
Sam

Please let members know if you found their posts helpful.