Group Permissions

  • Thread starter Thread starter news.comcast.giganews.com
  • Start date Start date
N

news.comcast.giganews.com

Yes - First create a security group

Then you can use the ADUC Delagate wizard and use the advanced tab to only
allow change password.

We have that set up and it seems to work well.

Ed
 
Hi There,

Can anyone point me in the right direction? I want to create a Security
group in my Active Directory. I want to all users who belong to the security
group to ONLY change passwords (nothing else).

What ACL's do I need to modify using ADSI EDIT to accomplish this task? I
dont want to assign them to the admins group or any group that gives them
permissions beyond setting/resetting passwords.

We also have Exchange 2000 in our environment if that matters.


-Timothy
 
Actually you don't need to do this in ADSIEDIT. Open dsa.msc (Users and Computers), select delegate control when you
right click the OU or whatever Branch in question and select your group and the reset password on user accounts common
task.

joe
 
Hi Joe,

Thank you very much. I am so used to operating in the AD at the
programming level that I totally forgotr about some of its functional
features. Thank you once again.

-Timothy


Joe Richards said:
Actually you don't need to do this in ADSIEDIT. Open dsa.msc (Users and
Click to expand...
Computers), select delegate control when you
right click the OU or whatever Branch in question and select your group
Click to expand...
and the reset password on user accounts common
 
No problem. I usually go straight to adsiedit myself. Just happened to know this one is a popular one and MS was
prepared for it.

--
Joe Richards
www.joeware.net
 
Back
Top