Q

Can admins reset user passwords without accessing the admin account?

Hello, I was wondering if an admin could create user accounts with the ability to reset other users' passwords. I'm setting up help desk accounts and am hoping they can do this without needing to access the admin account to reset other people's passwords.
In an Active Directory (Windows 2000 or Windows Server 2003) domain, you can use the Delegation of Control wizard to give an admin the ability to reset passwords. You can do so at the domain level, or just for an OU (organizational unit). So, for example, if you delegate this responsibility at the OU level, you can keep these newly privileged help desk people from being able to reset passwords on other privileged accounts, domain admins, for example. For information on how to use the delegation of control wizard see this article from Microsoft.
This was last published in June 2003

Dig Deeper on User passwords and network permissions

PRO+

Content

Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

SearchVirtualDesktop

SearchWindowsServer

SearchExchange

Close