Delegate Password Resetting Control in Active Directory

September 23rd, 2006

This allows you to have a user who can reset passwords for other users, but not necessarily administer the domain. We are using it so people can reset their passwords from a PHP page and so teachers will be able to reset their students’ passwords.
See:http://support.microsoft.com/default.aspx?scid=KB;en-us;296999

  1. Create a group that you want to be able to reset passwords
  2. Add the users you want to give the password resetting ability to to that group.
  3. Right Click on an OU that you want the resetters to be able to reset and choose “Delegate Control”
  4. Click Next and then add the Group you just created to the empty box.
  5. Click Next and then Check the Reset Password Box.
  6. Click Finish