Want a password reset tool for same username, but to change password

[nLinked]

I'm looking to make or find a small password reset tool for Active Directory, which we can provide to certain staff. However, the tool should only allow resetting a single pre-specified AD account (so they shouldn't be able to change any other user's password, but allow the staff to change the password for that one account.

Basically we have a need to reset the password of one particular account every day.

[Timeout]

Hi

It sounds like you need a customised taskpad with Delegated control, I think this post covers it

Restricting MMC.

and this may help How to Create Custom MMC and Add TaskPad - TechNet Articles - United States (English) - TechNet Wiki

I am sure others will answer as well.

[tech-man]

Have a look at Password Control on WiseSoft - Resources for IT Professionals - you can alter the XML file to customise what they are able to do.

[nLinked]

Thanks for your replies. I didn't know Wisesoft's one was configurable like that. But just managed to find Easy Password Reset Software which allows customisation. It seems to do exactly what we need (specific single username) but I'll go through some testing and see...

[glennda]

TBH its something which could easily be scripted

DSQUERY USER -samid enter_username_here | dsmod user -pwd enter_new_pw_here -mustchpwd no

and modify so that it prompts for the password rather then entering it in the script.

[nLinked]

TBH its something which could easily be scripted

DSQUERY USER -samid enter_username_here | dsmod user -pwd enter_new_pw_here -mustchpwd no

and modify so that it prompts for the password rather then entering it in the script.

Unfortunately the Easy Password Reset tool doesn't allow me to save the config file anywhere other than the user's local profile. I like the code above, but don't know how to program it into a window with an input box

[glennda]

Unfortunately the Easy Password Reset tool doesn't allow me to save the config file anywhere other than the user's local profile. I like the code above, but don't know how to program it into a window with an input box

I did have a script a while back at a previous place

Let me have a play later and I'll post back.

[nLinked]

TBH its something which could easily be scripted

DSQUERY USER -samid enter_username_here | dsmod user -pwd enter_new_pw_here -mustchpwd no

and modify so that it prompts for the password rather then entering it in the script.

This works in a .bat batch file, thanks so much!

set /P NewPassword="Enter the new password for user theirusername: "
DSQUERY USER -samid theirusername | dsmod user -pwd %NewPassword% -mustchpwd no

[Chunks_]

The link im providing is on how to use a simple program and some AD tweaks to allow anyone assigned to a specific security group to change passwords. Here is a link to a step by step to achieve this.