Create sub admin w/ rights to reset passwords and nothing else

[lizzieb]

I have been poking around trying to find a way to create a sub admin type account using CE9 that I can give to my help desk so they can reset passwords and re-enable locked accounts. However, I don't want them to have access to schedule, publish, delete, etc. I was thinking about creating a user that was a member of the administrator group and then removing all the specific rights to the folders and the like but I assume that user would have the rights to restore those rights as an administrator. Has anyone found a workaround?

Thanks in advance for your valuable time! Liz

 

[gashandler]

I was about ready to post pretty much the same question after having to just 5 minutes ago give an underling freaking administrative rights to CE9 so that I'm not the only one able to create logins.

Anyone know if there is a way to give another user subadmin rights to create users and reset passwords, etc. without having to put them in the admin group???

Incidentally, I've read that CE10 offers three different administrative rolls because of these type of issues.

 

[lisa1582]

Don't know about the stripped admin rights, however you could create a CE user or map an NT group and give those specific users "advanced" rights at the folder level.