locked
Taskpad view to include sub-OUs RRS feed

  • Question

  • Hi

    I'm implementing a solution in a school and want to be able to give teachers the ability to reset pupil passwords and to enable/disable their accounts. The easiest way (I think, though I'm open to other suggestions) is to give them a taskpad view of the pupils OU with the ability to change passwords & enable/disable accounts only.

    This has worked for us elsewhere though here I've got a problem because the yeargroups are broken into seperate sub OUs. The AD structure is a little like this:

    School

    -------Users

    --------------Pupils

    -------------------Year 7

    -------------------Year 8

    -------------------Year 9

    etc.

    So if I make the taskpad at the Pupils level, if someone clicks on Year 7 the three options that should be available to them are not there. I don't really want to make a new taskpad for every yeargroup. Is there a way around this?

    Thanks

    Kieran

    • Changed type Wilson Jia Friday, April 2, 2010 5:40 AM Wait for Customer upload
    • Changed type Wilson Jia Tuesday, April 6, 2010 3:26 AM
    Wednesday, March 24, 2010 9:12 AM

Answers

  • Hi Kieran,

     

    Thank you for posting in Windows Server Forum.

     

    If I understand you correctly, you want to delegated the "reset password" and "enable/disable accounts" on an OU and its sub-OU.

     

    You may follow the steps below to check whether the teacher account inherit the delegated permission to other sub-OUs.

     

    1.     Open Active Directory Users and Computers, click View -  select the "Advanced Features" option.

    2.     Right click the "Pupils" OU, click properties.

    3.     Go to "Security" page, click Advanced button.

    4.     Select the teachers ACE(Access control entry), click Edit.

    5.     Ensure these ACE apply to "this object and all descendant objects"

    6.     Click OK twice.

     

    After above configuration, are they able to access the other sub-OU?

     

    Regards,

    Wilson Jia


    This posting is provided "AS IS" with no warranties, and confers no rights.
    • Marked as answer by Wilson Jia Tuesday, April 6, 2010 3:26 AM
    Thursday, March 25, 2010 7:09 AM

All replies

  • Hi Kieran,

     

    Thank you for posting in Windows Server Forum.

     

    If I understand you correctly, you want to delegated the "reset password" and "enable/disable accounts" on an OU and its sub-OU.

     

    You may follow the steps below to check whether the teacher account inherit the delegated permission to other sub-OUs.

     

    1.     Open Active Directory Users and Computers, click View -  select the "Advanced Features" option.

    2.     Right click the "Pupils" OU, click properties.

    3.     Go to "Security" page, click Advanced button.

    4.     Select the teachers ACE(Access control entry), click Edit.

    5.     Ensure these ACE apply to "this object and all descendant objects"

    6.     Click OK twice.

     

    After above configuration, are they able to access the other sub-OU?

     

    Regards,

    Wilson Jia


    This posting is provided "AS IS" with no warranties, and confers no rights.
    • Marked as answer by Wilson Jia Tuesday, April 6, 2010 3:26 AM
    Thursday, March 25, 2010 7:09 AM
  • Thanks for the reply Wilson,

    I didn't explain the problem properly at first.

    When I set up the taskpad, you can see whatever tasks I give them in the OU that I created the pad in. For example if I made it in "Year 7" OU I would see all the pupils listed on the right and "Enable/Disable Account" and "Change Password" listed on the left. As soon as you move to another OU, the list of options disappear. This even happens for domain admins.

    Does that make sense? It would be easier to explain if I could upload screenshots here.

    Thanks

    Kieran.

     

    Thursday, March 25, 2010 3:48 PM
  • Hi Kieran,

     

    Could you please elaborate the details steps about how to setup the taskpad and upload the screenshots?

     

    For your convenience, I have created a workspace for you.  You can upload the screenshots to the following link.  (Please choose "Send Files to Microsoft")

     

    Workspace URL: (https://sftasia.one.microsoft.com/choosetransfer.aspx?key=9563a8e8-d3d0-43e2-9b00-a62ee4a2ba3b)

    Password: {+nKQ*psP*

     

     

     

    Regards,

    Wilson Jia


    This posting is provided "AS IS" with no warranties, and confers no rights.
    • Edited by Wilson Jia Monday, March 29, 2010 9:52 AM modify upload space
    Friday, March 26, 2010 6:21 AM
  • THanks for the link. I'll get those done today and upload them.

    Thanks

    Kieran.

     

    Monday, March 29, 2010 8:00 AM
  • Thanks for the link. I'll get those done today and upload them.

    Thanks

    Kieran.

     

    Monday, March 29, 2010 8:00 AM
  • Dear Customer,

     

    I just wanted to say hi, and to see how things are going. I haven't heard back from you yet and I was wondering if there are any updates on the service request.

     

    Thanks.

     

    Sincerely

     

    Wilson Jia


    This posting is provided "AS IS" with no warranties, and confers no rights.
    Wednesday, March 31, 2010 5:37 AM