Hello, I was wondering if an admin could create user accounts with the ability to reset other users' passwords. I'm setting up help desk accounts and am hoping they can do this without needing to access the admin account to reset other people's passwords.
In an Active Directory (Windows 2000 or Windows Server 2003) domain, you can use the Delegation of Control wizard to give an admin the ability to reset passwords. You can do so at the domain level, or just for an OU (organizational unit). So, for example, if you delegate this responsibility at the OU level, you can keep these newly privileged help desk people from being able to reset passwords on other privileged accounts, domain admins, for example. For information on how to use the delegation of control wizard see this article from Microsoft.
This was first published in June 2003
Join the conversationComment
Share
Comments
Results
Contribute to the conversation