Restrict an Admin Acct to Change Passwords ONLY 1

[CJarman]

Is there a way for me to give a user admin rights, across the DOMAIN (or for a certain OU), so that user can change passwords ONLY. I don't want the user to be able to do any other domain admin tasks. I simply want them to be in charge of changing passwords and unlocking accounts for a certain group of users. I have searched through GPO editor and can't find a way to make this happen.

THANKS for anyone who would take the time to help!

 

[paulhthomas]

yes, as long as you're using 2000 or 20003 you can delegate control over and ou to allow certain users / groups to perform certain function such as resetting passwords.

right click the ou that contain the users, that you want the group/users to reset passwords for, then click Delegate control, and follow the wizard.

Hope this helps

Paul

Paul Thomas
N+, MCP, MCSA: Messaging, MCSE 2003

Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Passed
70-294 - Passed
70-284 - Passed
70-297 - Passed

 

[CJarman]

THANKS Paul! That worked like a charm. Have a nice weekend!

 

[paulhthomas]

No problem, glad it did the trick

Paul Thomas
N+, MCP, MCSA: Messaging, MCSE 2003

Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Passed
70-294 - Passed
70-284 - Passed
70-297 - Passed