By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers.
Hello, I was wondering if an admin could create user accounts with the ability to reset other users' passwords. I'm setting up help desk accounts and am hoping they can do this without needing to access the admin account to reset other people's passwords.
In an Active Directory (Windows 2000 or Windows Server 2003) domain, you can use the Delegation of Control wizard to give an admin the ability to reset passwords. You can do so at the domain level, or just for an OU (organizational unit). So, for example, if you delegate this responsibility at the OU level, you can keep these newly privileged help desk people from being able to reset passwords on other privileged accounts, domain admins, for example. For information on how to use the delegation of control wizard see
this article from Microsoft