Remove From My Forums

Reset Password permission of all users in an OU to a user.

Question
0

Sign in to vote

I have a user called user1. I have an OU called Trainees. Now I want to assign reset password permission and add/ delete users to user1, so that he can reset password of all users and add/delete users in the Trainees OU. I want user1 to be able to do only these two tasks in Trainees OU only. How do I do that?
Thanks and Regards, Radhakrishnan

Tuesday, June 5, 2012 5:13 AM

Answers

0

Sign in to vote
Hello,

delegate control on the OU for the users, better create and use a security group instead that contains the user accounts, is the way to go, details are in:

http://jorgequestforknowledge.wordpress.com/2006/01/05/creating-a-taskpad-and-delegating-several-admin-tasks/

http://jorgequestforknowledge.wordpress.com/2006/05/16/delegation-of-control-how/ http://support.microsoft.com/kb/296999
Best regards

Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/

Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
- Marked as answer by radhakrishnan88 Tuesday, June 5, 2012 6:43 AM
Tuesday, June 5, 2012 6:04 AM
0

Sign in to vote
You can look for the below articles to achieve the control using delegation.

http://support.microsoft.com/kb/296999

http://www.windowsitpro.com/article/domains2/jsi-tip-8144-how-can-i-allow-an-ordinary-user-to-add-a-computer-to-a-domain-

How to Delegate Basic Server Administration To Junior Administrators. http://support.microsoft.com/kb/555986

Awinish Vishwakarma - MVP - Directory Services
My Blog: awinish.wordpress.com
Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.
- Marked as answer by radhakrishnan88 Tuesday, June 5, 2012 6:43 AM
Tuesday, June 5, 2012 6:22 AM

All replies

0

Sign in to vote
You have to use AD Delegation

http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html

Regards,

_Prashant_

MCSA|MCITP SA|Microsoft Exchange 2003 Blog - http://prashant1987.wordpress.com Disclaimer: This posting is provided AS-IS with no warranties/guarantees and confers no rights.
- Proposed as answer by Meinolf Weber Tuesday, June 5, 2012 6:03 AM
Tuesday, June 5, 2012 5:47 AM
0

Sign in to vote
Hello,

delegate control on the OU for the users, better create and use a security group instead that contains the user accounts, is the way to go, details are in:

http://jorgequestforknowledge.wordpress.com/2006/01/05/creating-a-taskpad-and-delegating-several-admin-tasks/

http://jorgequestforknowledge.wordpress.com/2006/05/16/delegation-of-control-how/ http://support.microsoft.com/kb/296999
Best regards

Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/

Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
- Marked as answer by radhakrishnan88 Tuesday, June 5, 2012 6:43 AM
Tuesday, June 5, 2012 6:04 AM
0

Sign in to vote
You can look for the below articles to achieve the control using delegation.

http://support.microsoft.com/kb/296999

http://www.windowsitpro.com/article/domains2/jsi-tip-8144-how-can-i-allow-an-ordinary-user-to-add-a-computer-to-a-domain-

How to Delegate Basic Server Administration To Junior Administrators. http://support.microsoft.com/kb/555986

Awinish Vishwakarma - MVP - Directory Services
My Blog: awinish.wordpress.com
Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.
- Marked as answer by radhakrishnan88 Tuesday, June 5, 2012 6:43 AM
Tuesday, June 5, 2012 6:22 AM

Products

Resources

Solutions

Updates

Trials

Related Sites

Training

Certifications

Other resources

Support options

More support

Not an IT pro?

Answered by:

Reset Password permission of all users in an OU to a user.

Question

Answers

All replies