+ Post New Thread
Results 1 to 13 of 13
Windows Server 2008 Thread, Delegate Control: Password Reset in Technical; Hi all - I've been searching the net and given up to suck the knowlage from your brains instead... I ...
  1. #1

    Join Date
    Feb 2009
    Posts
    460
    Thank Post
    66
    Thanked 34 Times in 21 Posts
    Blog Entries
    1
    Rep Power
    19

    Delegate Control: Password Reset

    Hi all - I've been searching the net and given up to suck the knowlage from your brains instead...

    I have a 2008 domin and I have set delegate rights on the students User OU for a group which will be able to reset password for the students and do nothing more...

    I have followed instructions in doing this and they always stop when you have setup the delegation... it's the next bit where I get stuck... How do I make it so a teacher in the password reset group can reset the passwords? I have on a workstation opened mmc.exe and couldn't work out how to link the domain users as an object. I have on one of the servers set up the mmc but then when I saved it and ran it on a workstation it was no longer able to see into the active directory. Am I doing something completely stupid or just not finding the required instructions?

    any help would be greatfully received,
    Thanks, Dave

  2. #2
    jamesreedersmith's Avatar
    Join Date
    Sep 2009
    Location
    Ruskington
    Posts
    1,194
    Thank Post
    81
    Thanked 263 Times in 235 Posts
    Rep Power
    79
    Have you installed the adminpak on the machine so it has the users and computers add in installed and registered? - obviously remove the shortcuts from general user access after installation

  3. Thanks to jamesreedersmith from:

    DAckroyd (13th November 2009)

  4. #3
    TheLibrarian
    Guest
    You will need to have the adminpak installed on the PC's that you intent to use your new MMC on.

    You could supply a script that lets the user enter a username, the script could set a default password and the change password at next logon attribute.

    Do you need more information on how to create a custom mmc?

  5. Thanks to TheLibrarian from:

    DAckroyd (13th November 2009)

  6. #4

    Join Date
    Feb 2009
    Posts
    460
    Thank Post
    66
    Thanked 34 Times in 21 Posts
    Blog Entries
    1
    Rep Power
    19
    I'm just installing an Administrator tool pack atm - I'm trying the one for server 2003 as I can't find a 2008 tool pack for running on XP

  7. #5
    mrmontymick's Avatar
    Join Date
    Mar 2009
    Location
    Peterborough, UK
    Posts
    64
    Thank Post
    7
    Thanked 16 Times in 10 Posts
    Rep Power
    14
    Any teachers that we give password reset ability have a VBScript on their desktop that they run. They type in the students username and their password is reset.

    Generally find it much easier than trying to show teachers how to use the admin tools.

  8. #6

    Join Date
    Feb 2009
    Posts
    460
    Thank Post
    66
    Thanked 34 Times in 21 Posts
    Blog Entries
    1
    Rep Power
    19
    I have the mmc working now and am on a test user who was set to only be able to change students passwords but they can still see everything else in AD - is there a way of making it so they can only see the "Users" OU?
    Thanks

  9. #7
    TheLibrarian
    Guest
    You can select the user OU, right click and choose new window from here.

    Close the previous window and the MMC is rooted at the chosen OU.

  10. Thanks to TheLibrarian from:

    DAckroyd (13th November 2009)

  11. #8
    bmdixon's Avatar
    Join Date
    Apr 2008
    Location
    Birmingham
    Posts
    259
    Thank Post
    44
    Thanked 58 Times in 39 Posts
    Rep Power
    23
    If you open mmc.exe then add the Active Directory snap in you can then create a custom mmc for them to see only what they need to. Select the OU that they need access to, right-click and choose "New window from here". Save that as a custom msc and you should be sorted.

  12. Thanks to bmdixon from:

    DAckroyd (13th November 2009)

  13. #9

    Join Date
    Feb 2009
    Posts
    460
    Thank Post
    66
    Thanked 34 Times in 21 Posts
    Blog Entries
    1
    Rep Power
    19
    Thanks all - got exactly what I want here

    Do I need to have the Tool Kit installed on all computers that I want to allow management from?
    Last edited by DAckroyd; 13th November 2009 at 02:12 PM.

  14. #10
    Aaron's Avatar
    Join Date
    Feb 2009
    Location
    N.Ireland
    Posts
    251
    Thank Post
    78
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hi guys

    I have been asked to do the same here, we are running server 2008 with windows xp clients and a teacher has asked if it would be possible to reset pupil passwords. I don’t want to give out access to the server but want to make it easy for a staff member to just search for the username and reset password to a default then when the pupil logs in they must change this. If I install the adminpak is this possible to allow staff an easy way of changing the password?

    or as mrmontymick has said is there a script that I can use to place on teachers desktops that when they click it just lets them search and click reset password that seems fool proof

  15. #11
    R0M
    R0M is offline
    R0M's Avatar
    Join Date
    Mar 2009
    Location
    Perth
    Posts
    68
    Thank Post
    7
    Thanked 8 Times in 8 Posts
    Rep Power
    13
    I am surprised no one has recommended using Wisesoft's Password Control? Its very easy, with big colourfull buttons and dosnt give the users much they can mess up. We use it to get the Library staff to reset student passwords.

    www.wisesoft.co.uk

  16. Thanks to R0M from:

    Aaron (4th June 2010)

  17. #12

    Join Date
    Feb 2009
    Posts
    460
    Thank Post
    66
    Thanked 34 Times in 21 Posts
    Blog Entries
    1
    Rep Power
    19
    is anyone using powergui for doing this? either with QuestAD cmdlets or built in AD stuff for 2k8r2.
    how do the teachers get on with it?

  18. #13
    Aaron's Avatar
    Join Date
    Feb 2009
    Location
    N.Ireland
    Posts
    251
    Thank Post
    78
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Rom

    Thank you that looks exactly what i am looking for staff couldnt go wrong with this.



SHARE:
+ Post New Thread

Similar Threads

  1. Self Service Password Reset
    By plexer in forum EduGeek Self Service Password Reset
    Replies: 273
    Last Post: 5th November 2013, 07:51 PM
  2. bulk password reset
    By Jonny_sims in forum Windows
    Replies: 10
    Last Post: 26th September 2011, 11:12 PM
  3. Delegate control - Unlock Accounts
    By Gatt in forum Windows Server 2008
    Replies: 1
    Last Post: 24th September 2008, 12:50 PM
  4. Specops Password Reset
    By linkazoid in forum Windows
    Replies: 7
    Last Post: 16th May 2008, 03:27 PM
  5. reset admin password
    By fafster in forum Windows
    Replies: 11
    Last Post: 27th February 2008, 11:01 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •