delegate control problem

[cm6043]

Hi All

I have configurated "delegate control" to allow user1 to reset the password of user2 and he can also create new users in the Sales OU. Both user1 and user2 are in the same OU (Sales). How can user1 reset the password of user2 from his own desktop??

How could user1 create a new user account in the OU of Sale?

 

[mrmoneymatters]

Install the adminpak.msi from the server 2000 cd on user one's computer. Then on his computer, create a custom mmc with ad users and computers only, that way he isn't looking at other stuff he shouldn't be. All he will have to do is launch the mmc that you created for him and navigate to the ou that you want him to manage. If you have his permissions set right he can do everything you want him to.

 

[cm6043]

mrmoneymatters

Thanks for your information. Could you explain to me how to create a custom mmc with ad users and computers only.

 

[mrmoneymatters]

OK.
If you have already installed the admin pak.

Go to contorl panel, then administrative tools. In there you will see ad users and computers. Create a shortcut to this tool on the user1's desktop.