Running windows 2000 with AD and my users do not have access to the domain
contollers and my workstations are Windows 2000. Can I use dsmod.exe so that
I can go to the command line and change my password? The AdminPak for Windows
2003 will not install on a Windows 2000 server but can I just copy the
dsmod.exe file itself and run it from a Windows 2000 server?

Is there some other way or another utility that I could use that would allow
me to have users change their password at a command prompt without having
access to domain controllers?

Thanks
Randy

I am a bit confused in that you state that users do not have access to
domain controllers? They don't need to logon to a domain controller if that
is what you mean and using control-alt-delete they can change their domain
passwords. If they are all remote users then that is a special case and we
will need more details. You can use the AD tools such as dsmod and dsquery
if you install adminpak for Windows 2003 on an XP Pro domain computer which
is well worth having since you could also install Group Policy Management
Console on it to manage GP for your Windows 2000 domain. Of course such XP
Pro computer would need to be a secured workstation since you would need to
use domain administrator credentials on it. --- Steve



"Randy" <(E-Mail Removed)> wrote in message
news:4468E6C4-CB36-4E4E-A3D5-(E-Mail Removed)...
> Running windows 2000 with AD and my users do not have access to the domain
> contollers and my workstations are Windows 2000. Can I use dsmod.exe so
> that
> I can go to the command line and change my password? The AdminPak for
> Windows
> 2003 will not install on a Windows 2000 server but can I just copy the
> dsmod.exe file itself and run it from a Windows 2000 server?
>
> Is there some other way or another utility that I could use that would
> allow
> me to have users change their password at a command prompt without having
> access to domain controllers?
>
> Thanks
> Randy

I am as confused as Steve.
You say your users have Windows 2000.
Is there some reason that they cannot do alt-cntrl-del and
click the change password button ? This tool lets then
change passwords for any account provided only that
the domain can be located (you can type free text for the
domain, not just drop select) and that they know the old
password.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Randy" <(E-Mail Removed)> wrote in message
news:4468E6C4-CB36-4E4E-A3D5-(E-Mail Removed)...
> Running windows 2000 with AD and my users do not have access to the domain
> contollers and my workstations are Windows 2000. Can I use dsmod.exe so
that
> I can go to the command line and change my password? The AdminPak for
Windows
> 2003 will not install on a Windows 2000 server but can I just copy the
> dsmod.exe file itself and run it from a Windows 2000 server?
>
> Is there some other way or another utility that I could use that would
allow
> me to have users change their password at a command prompt without having
> access to domain controllers?
>
> Thanks
> Randy

"" wrote:
> Running windows 2000 with AD and my users do not have access
> to the domain
> contollers and my workstations are Windows 2000. Can I use
> dsmod.exe so that
> I can go to the command line and change my password? The
> AdminPak for Windows
> 2003 will not install on a Windows 2000 server but can I just
> copy the
> dsmod.exe file itself and run it from a Windows 2000 server?
>
> Is there some other way or another utility that I could use
> that would allow
> me to have users change their password at a command prompt
> without having
> access to domain controllers?
>
> Thanks
> Randy

the ds command can only be used on a windows 2003 server and it does
not matter if you have a w2k or w2k3 ad.

you could use ADMOD from joeware.net but this might be to difficult
and to much power for users.

Try NET USER /? for more info

Cheers,

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Securit...ict554244.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1760122