Junior Admins.....

[Eric]

We want to create a group of "junior admins" and allow
them to reset passwords and pretty much nothing else. I
create a group and put members in it, then I created a
MMC with just to OU and its children in it for "junior
admins". I then used the delegate wizard and added this
group to change and reset passwords group. My question
is, where are these permissions being applies, what do I
do if in 6 weeks I want to revoke this authority? Where
is this being set?

 

[Jerold Schulman]

We want to create a group of "junior admins" and allow
them to reset passwords and pretty much nothing else. I
create a group and put members in it, then I created a
MMC with just to OU and its children in it for "junior
admins". I then used the delegate wizard and added this
group to change and reset passwords group. My question
is, where are these permissions being applies, what do I
do if in 6 weeks I want to revoke this authority? Where
is this being set?

See http://support.microsoft.com?kbid=315676


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[Guest]

Dsrevoke.exe complements the functionality provided by the Delegation of Control Wizard, which is used to delegate administrative authority, by providing the ability to revoke delegated administrative authority. You can download it from Microsoft. Haven't tried it yet, anxious to see if it works. Let me know how it works out

http://www.microsoft.com/downloads/...07-c403-4bda-b0e4-c2093b8d6383&displaylang=en