+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 19
Windows Thread, Teachers & AD. in Technical; Hi. Does anyone here have a method to give teachers access to the ability to enable/disable accounts, move users to ...
  1. #1

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    15

    Teachers & AD.

    Hi.

    Does anyone here have a method to give teachers access to the ability to enable/disable accounts, move users to another OU (internet ban for example) and reset passwords?

    We do have SSPR for passwords, however it doesnt allways work for some bizzare reason, and if i create a custom MMC for the rest, they can technically view the entire AD structure, and for the life of me, i cant work out how to disable the other functions, like delete, properties, ect;

    What methods do all you lot use?

    Thanks in advance all. .

  2. #2

    Join Date
    Jul 2008
    Posts
    276
    Thank Post
    24
    Thanked 10 Times in 9 Posts
    Blog Entries
    2
    Rep Power
    18
    I would let the teachers teach, are you suggesting this because your workload is so heavy?

  3. #3

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    15
    Because a certain teacher has been demanding it for when i got on holiday in a few weeks, otherwise he cant do that without me.

    I dont mind, as long as i can lock out bits that i dont want him to access/do.
    Its literally just the pupils OU and its sub OUs. Nout else.

  4. #4

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,136
    Thank Post
    215
    Thanked 1,258 Times in 789 Posts
    Blog Entries
    4
    Rep Power
    507
    if you just give him relevant permissions (change password etc) for the various ous it should be fine, as long as the permissions are denied on others you don't want him to have access to.

    You should also be able to remove right click and toolbars from the mmc and add links to the functions you want to give him.

  5. #5
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    429
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    I have given a couple of teachers an ou specific MMC and then delegated the "change passwords" role to them on that ou.

    it works ok, but i would not give it to most teachers, just the ones who are IT coordinators etc

    I am waiting for a colleague to finish writing his new app, (bit like URMA tools4ever), webserver based AD control and all-round user management. this wiil mean i can publish a page for teachers to log in to and they will get the password change for their class and nothing else.

    looking forward to it

    BoX

  6. #6

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,051
    Thank Post
    209
    Thanked 427 Times in 307 Posts
    Rep Power
    144
    I've written a simple password changing program which allows teachers to reset student passwords with a couple of clicks of the mouse. Requires .NET 3.5 to run thou as it was done in visual basic express 2008.

    I will share it if people are interested.

  7. #7
    mmoseley's Avatar
    Join Date
    Apr 2007
    Location
    Birmingham
    Posts
    751
    Thank Post
    109
    Thanked 105 Times in 80 Posts
    Blog Entries
    2
    Rep Power
    43
    Defo! Please Share!

  8. #8

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,938
    Thank Post
    886
    Thanked 1,693 Times in 1,472 Posts
    Blog Entries
    12
    Rep Power
    447
    Quote Originally Posted by maniac View Post
    I've written a simple password changing program which allows teachers to reset student passwords with a couple of clicks of the mouse. Requires .NET 3.5 to run thou as it was done in visual basic express 2008.

    I will share it if people are interested.
    Yes please

  9. #9

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,051
    Thank Post
    209
    Thanked 427 Times in 307 Posts
    Rep Power
    144
    I'll stick it up soon then.

    I just need to de-brand it as it's customised for our school at the moment with our logo in it etc.

  10. #10

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    5,053
    Thank Post
    160
    Thanked 914 Times in 717 Posts
    Blog Entries
    3
    Rep Power
    271
    Oh please share, thats worth paying for in my eye's would help allot as far as password changes are concerned.. but agree that i myself would only give it to the ICT Teachers if anything..

    Looking forward to this.

    James.

  11. #11
    antoeknee's Avatar
    Join Date
    Oct 2007
    Location
    NW
    Posts
    210
    Thank Post
    0
    Thanked 6 Times in 6 Posts
    Rep Power
    15
    We've recently found a free app that allows password changes.

    Delegate control to change password for the relevant group of users on the specific OU.

    Run the app and input user ID, user name is shown. The password can be changed to anything here. Though we've chosen to have a defined string and force password change at next logon.

    Doesn't allow change to other OU's (an access is denied message is shown) and even though there is a disable account button this won't work as we've not allowed this in AD either.

    I'll post a link when I get in tomorrow

  12. #12

    Theblacksheep's Avatar
    Join Date
    Feb 2008
    Location
    In a house.
    Posts
    1,934
    Thank Post
    138
    Thanked 290 Times in 210 Posts
    Rep Power
    193
    Passmanager by MST works well. Dont know if its CC3 specific tho...

  13. #13

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,659
    Thank Post
    858
    Thanked 646 Times in 429 Posts
    Rep Power
    498
    Password Control from Wisesoft works great too - even does Bulk Password resets and can enabe/disable accounts

    Though do have slight issues with my install at moment but its prob something I've done

  14. #14
    amfony's Avatar
    Join Date
    Jul 2007
    Location
    Sydney
    Posts
    161
    Thank Post
    29
    Thanked 13 Times in 13 Posts
    Rep Power
    17
    Password Control from Wisesoft works great too
    Yep - concur. Simple and effective and even better you can disable buttons and such by editing an XML file.

  15. #15

    Join Date
    Jan 2008
    Location
    Chesterfield, Derbyshire
    Posts
    191
    Thank Post
    11
    Thanked 35 Times in 25 Posts
    Rep Power
    21
    We have a php script that allows certain teachers to change passwords without knowing the old one, it runs on a linux machine via apache connected to win2k3 ads.

    It uses that net ads command( "net ads password $name@DOMAIN $new_password -U $admin_user@DOMAIN%$admin_pass") to change it, because we pass an account with permission to change passwords we dont need to allow teachers to have any permissions in AD. We limit who can use the script in the script itself (doing lookup of whos connected to network drives at that ip address, with an exception for terminal services). Also we do a lookup and display if the user is disabled etc. stops them wondering why password change didnt work (ie. they cant log in).

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. What do you & the teachers wear to work?
    By StewartKnight in forum General Chat
    Replies: 78
    Last Post: 22nd September 2008, 11:59 AM
  2. Replies: 6
    Last Post: 7th April 2008, 07:10 PM
  3. [Sold/Traded] B&W 603s3 & LCR600s3 black speakers
    By markcuk in forum Classified Adverts
    Replies: 1
    Last Post: 17th March 2008, 07:35 PM
  4. The dreaded JE & NM & Snr ICT Tech Positions
    By tech_guy in forum General Chat
    Replies: 3
    Last Post: 21st January 2008, 01:52 PM
  5. Supply Teachers & Electronic Registration
    By pete in forum MIS Systems
    Replies: 16
    Last Post: 5th April 2007, 09:14 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •