Hi i am running windows 2000 server promoted to a domain controller, i would
to delegate control to certain people so all the can do is reset passwords
and also unlock user accounts. Is there a way that i can do this so that
they can not do anything else, such as delete user accounts or even veiw
other info such as members of tabs ( the last part is not that important).

Can some one advise me on the steps i would need to take, i have been
looking for a while with no access

Darin

Darin MacKenzie wrote:
> Hi i am running windows 2000 server promoted to a domain controller, i would
> to delegate control to certain people so all the can do is reset passwords
> and also unlock user accounts. Is there a way that i can do this so that
> they can not do anything else, such as delete user accounts or even veiw
> other info such as members of tabs ( the last part is not that important).
>
> Can some one advise me on the steps i would need to take, i have been
> looking for a while with no access

Reset password:
http://www.windowsitpro.com/Article/...9190/9190.html
http://www.windowsitpro.com/Article/...9189/9189.html

Unlock account:
http://support.microsoft.com/?kbid=294952
http://www.windowsnetworking.com/kba...ountRight.html
http://www.joeware.net/win/free/tools/unlock.htm

Have a fun , be sure to test it before giving tools to the peoples.

--
Tomasz Onyszko
http://www.w2k.pl/blog/ - (PL)
http://blogs.dirteam.com/blogs/tomek/ - (EN)

In addition to what Tomasz said:
http://blogs.dirteam.com/blogs/jorge...01/05/369.aspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
"Darin MacKenzie" <(E-Mail Removed)> wrote in
message news:F6372315-2C4D-4C1A-8098-(E-Mail Removed)...
> Hi i am running windows 2000 server promoted to a domain controller, i
> would
> to delegate control to certain people so all the can do is reset passwords
> and also unlock user accounts. Is there a way that i can do this so that
> they can not do anything else, such as delete user accounts or even veiw
> other info such as members of tabs ( the last part is not that important).
>
> Can some one advise me on the steps i would need to take, i have been
> looking for a while with no access
>
> Darin