Giving Rights to Change Passwords to Non-Active Directory Users

[demanding]

Referencing thread1496-1594021 - has anyone had success in assigning rights to personnel for resetting passwords or unlocking modular messaging boxes in Active Directory (Exchange Storage)? We are using MM5.2. We want to give access to either our outsourced Help Desk to do this (they only have access to Active Roles and MM is not available on that) or to our internal Local Operations Staff (they do not have access to AD either). I have read lots of stuff and am not clear on how to set it up or how do they get to it? Do they log into one of the MAS servers and then what? If so, how can I keep them from accidentally shutting down the MAS?

 

[texeric]

First they would require the ability to launch ADUC (Active Directory Users and Computers). If they can't do that or don't have that MMC snap-in then that is where this is halted.

If they can launch ADUC then all they need is read-only access to AD. They would need the MM Active Directory Subscriber Administration Avaya software installed (to see the Modular Messaging tab in AD). Keep in mind Avaya only supports this software on 32bit Windows OS (XP on up I believe). So this isn't possible on 64bit Windows OS systems.

Once they have AD access and the Avaya Subscriber Administration software installed, then they would have to be added to the builtin MM security role "Subscriber Administration" within the MM VMSC. Or if you wanted to grant more granular permissions while not wanting to give them full subscriber administration rights then you can create a custom MM security role with the tasks you want to grant them.

http://www.theviagroup.com