Ask the Expert

Can admins reset user passwords without accessing the admin account?

Hello, I was wondering if an admin could create user accounts with the ability to reset other users' passwords. I'm setting up help desk accounts and am hoping they can do this without needing to access the admin account to reset other people's passwords.
In an Active Directory (Windows 2000 or Windows Server 2003) domain, you can use the Delegation of Control wizard to give an admin the ability to reset passwords. You can do so at the domain level, or just for an OU (organizational unit). So, for example, if you delegate this responsibility at the OU level, you can keep these newly privileged help desk people from being able to reset passwords on other privileged accounts, domain admins, for example. For information on how to use the delegation of control wizard see this article from Microsoft.

This was first published in June 2003

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: