Can admins reset user passwords without accessing the admin account?

Hello, I was wondering if an admin could create user accounts with the ability to reset other users' passwords. I'm setting up help desk accounts and am hoping they can do this without needing to access the admin account to reset other people's passwords.
In an Active Directory (Windows 2000 or Windows Server 2003) domain, you can use the Delegation of Control wizard to give an admin the ability to reset passwords. You can do so at the domain level, or just for an OU (organizational unit). So, for example, if you delegate this responsibility at the OU level, you can keep these newly privileged help desk people from being able to reset passwords on other privileged accounts, domain admins, for example. For information on how to use the delegation of control wizard see this article from Microsoft.
This was last published in June 2003

Dig Deeper on User passwords and network permissions



Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: