Teacher resetting student passwords only

I have installed password control for the ICT teachers to enable them to change student passwords only. but unfortunately they can access staff usernames too and can change thier passwords, I would like to only give them access to students user accounts not staff how do i acheive this. if it is not acheivable through password control is there any other tool that i can use to acheive password change for students only.

I have tried the mmc option but when i login as a teacher it says "you can not use the mmc in author mode ......" and does not work.
please guide me to a solution

Thanks

Have you delegated control to the ICT teachers so they can change passwords?

Quote:

---

Originally Posted by rush_tech

Have you delegated control to the ICT teachers so they can change passwords?

---

They need to be a member of the account operators group

I tend to agree with russ_tech. You need to delegate the necessary rights on a OU which contains the student user accounts. If you make staff 'account operators' then they will be able to manage all (except admin) accounts.

IIRC you need to go into AD Users & Computer, right click on the OU containing the student accounts and choose the 'delegate ...' option.