Admin Users - But not full control ?

[cpjitservices]

Hi,

Some of our managers want to have control of things like Changing Passwords, however I don't want to give them access to things like changing passwords on Admin accounts only the restricted user accounts.

Is there anyway I can setup an Admin account so they can change passwords only on accounts higher Admins can specify ? I also don't want to give them access to group policy.

Can this be achieved in Group Policy ?


Cheers

[FN-GM]

you do this by using the delegate control feature in active directory. lots on here about it.

Our teachers can change student passwords but not staff.

[cpjitservices]

found it!!

Thanks for that!!!!

[FN-GM]

found it!!

Thanks for that!!!!

We also created a custom MMC so the staff could see the other OU's