Delegate Password Resetting Control in Active Directory
September 23rd, 2006This allows you to have a user who can reset passwords for other users, but not necessarily administer the domain. We are using it so people can reset their passwords from a PHP page and so teachers will be able to reset their students’ passwords.
See:http://support.microsoft.com/default.aspx?scid=KB;en-us;296999
- Create a group that you want to be able to reset passwords
- Add the users you want to give the password resetting ability to to that group.
- Right Click on an OU that you want the resetters to be able to reset and choose “Delegate Control”
- Click Next and then add the Group you just created to the empty box.
- Click Next and then Check the Reset Password Box.
- Click Finish