Password Resets

[shall]

Is there any way to allow a certain user group to reset
passwords but prohibit them from changing the
Administrator password?

 

[Super-g]

You could place the adminitrator account in a separate OU
and then removing the permissions on that OU for that user.

Hope this helps.

 

[Alan Sterling [MSFT]]

Hi Shall,

You can not delegate "reset password" on any user that is a member of the
"administrators" group. This is by esign.

To delegate the "reset password" on a user with administrative
repsonsibilities, you will need to make sure the user is not a member of
"administrators". (This may require creating custom rights on the domain
for
the user to be able to perform administrative duties.)

You may want to follow:
296999 Minimum Permissions Are Needed for a Delegated Administrator to Force
http://support.microsoft.com/?id=296999

Regards,

--

Alan Sterling---MCSE
Windows 2000 Directory Services

This posting is provided "AS IS" with no warranties, and confers no rights.
"Use of included script samples are subject to the terms
specified at
http://www.microsoft.com/info/cpyright.htm"