Delegate password reset to HelpDesk

[plessm]

Hello, our HelpDesk is setup to reset our users' Active Directory accounts.

Currently they are using terminal services to login to a domain controller server, load Active Directory Users and Computers, change the user's password, then log back out of TS.

My question is, is there a utility they can use to reset passwords with having to use Terminal Services to get to the AD users and computers program? Web based password reset would be ideal, but I can't seem to find much on this subject. Thanks.

 

[markdmac]

If you load the support tools on their workstations, they can run AD Users and Computers from there.

Just wrote this for you, but it is untested. Should work so long as your users have the delegated rights.

You need to edit the LDAP portion to match your environment.

'==========================================================================
'
' NAME: ResetPasswords.vbs
'
' AUTHOR: Mark D. MacLachlan , The Spider's Parlor
' URL:

http://www.thespidersparlor.com

' DATE : 1/30/2004
'
' COMMENT: <comment>
'
'==========================================================================

UserName = InputBox(&quot;What Account Needs To Be Reset?&quot;,&quot;Change PWD?&quot
NewPass = InputBox(&quot;Type New Password&quot;,&quot;Change PWD?&quot

Set objUser = GetObject _
(&quot;LDAP://cn=&quot;& UserName & &quot;,ou=Users,dc=thespidersparlor,dc=com&quot
objUser.SetPassword NewPass
objUser.setInfo
Wscript.Echo &quot;Password Changed&quot;