+ Post New Thread
Results 1 to 8 of 8
Windows Thread, Problmes running custon MMC console for staff user in Technical; I have created a custom MMC console that will let a staff user change pupils passwords. i have install the ...
  1. #1
    Kyle's Avatar
    Join Date
    Jan 2006
    Posts
    983
    Thank Post
    92
    Thanked 14 Times in 13 Posts
    Rep Power
    21

    Problmes running custon MMC console for staff user

    I have created a custom MMC console that will let a staff user change pupils passwords. i have install the adminpak tools of server 2003 onto the XP workstation. If i log on it works fine but when they staff log on it come up with an error "current policies stop microsoft management console from opening in author mode"

    I think it is a permission to access something on the c:drive, staff have no c/:drive access when on the network here.


    Can anyone help or suggest any way to get this working.

  2. #2
    Ryan's Avatar
    Join Date
    Jan 2008
    Location
    Scotland
    Posts
    537
    Thank Post
    12
    Thanked 16 Times in 15 Posts
    Blog Entries
    1
    Rep Power
    29
    Top of my head sounds like it's something to do with the rights for users accessing those commands, specifically the "reset password" one. Bit rusty. Go check it

  3. #3
    markcuk's Avatar
    Join Date
    Sep 2005
    Posts
    588
    Thank Post
    29
    Thanked 60 Times in 55 Posts
    Rep Power
    38
    you have to add the member of staff to the account operators group

    mark

  4. #4
    Wiseman82's Avatar
    Join Date
    Jan 2006
    Location
    North East
    Posts
    48
    Thank Post
    3
    Thanked 14 Times in 11 Posts
    Rep Power
    21
    Check this setting:

    http://technet2.microsoft.com/window....mspx?mfr=true

    Also, I wrote a tool for resetting AD passwords which many users prefer over a custom MMC:
    http://www.wisesoft.co.uk/Products/P...n/default.aspx

    Hope this helps,

    David

  5. #5
    Kyle's Avatar
    Join Date
    Jan 2006
    Posts
    983
    Thank Post
    92
    Thanked 14 Times in 13 Posts
    Rep Power
    21
    I am still trying to get this working, I have installed the admin tools on staff members laptop and put the custom msc concole on but they cannot use it. i have tried putting the custom console onto a shared area it still does not work. It comes up with an error 'Current Policies prevent the microsoft management Console from opening in author mode. Consult your administrator for details.'


    Wiseman

    I like your password changer, is there anyway it can limited so they can only search through certain OU's ie, the pupil one?
    Last edited by Kyle; 15th April 2008 at 04:49 PM.

  6. #6
    Kyle's Avatar
    Join Date
    Jan 2006
    Posts
    983
    Thank Post
    92
    Thanked 14 Times in 13 Posts
    Rep Power
    21
    Found out what it was witht he custom MMC.

    I had it running in author mode, as soon as si changed it to limitied user it worked.


    @Wiseman

    I would still like to know if you can limit what your password software has access to?

  7. #7
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,995
    Thank Post
    120
    Thanked 286 Times in 263 Posts
    Rep Power
    108
    Quote Originally Posted by Kyle View Post
    Found out what it was witht he custom MMC.

    I had it running in author mode, as soon as si changed it to limitied user it worked.


    @Wiseman

    I would still like to know if you can limit what your password software has access to?
    Just make sure you only delegate the user permission to change the passwords of the users in the OUs that you want them to.

  8. #8
    Wiseman82's Avatar
    Join Date
    Jan 2006
    Location
    North East
    Posts
    48
    Thank Post
    3
    Thanked 14 Times in 11 Posts
    Rep Power
    21
    Quote Originally Posted by ChrisH View Post
    Just make sure you only delegate the user permission to change the passwords of the users in the OUs that you want them to.
    I advise people to secure their domain from Active Directory rather than from applications. If you use custom security within an application, users can always write a script of download another app to bypass the application level restrictions.

    I created a quick article about delegation:
    Password Control for Active Directory - Security

    Although I advise using Active Directory to control security, there is an alternative method you can use to hide accounts from Password Control:
    Password Control for Active Directory - Hide Accounts



SHARE:
+ Post New Thread

Similar Threads

  1. Wii Console Number - what's yours?
    By tarquel in forum Gaming
    Replies: 41
    Last Post: 11th June 2014, 01:05 PM
  2. Replies: 28
    Last Post: 15th August 2010, 10:47 AM
  3. Replies: 2
    Last Post: 16th January 2008, 01:46 PM
  4. Power User status for all Staff
    By mrforgetful in forum MIS Systems
    Replies: 7
    Last Post: 10th September 2007, 10:12 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •