Change Password MMC

[Hightower]

I've created an MMC to allow users to change students passwords, and delegated it necessary etc. However, to run this MMC the machine needs the AD snap-in installed.

What's the best way to install this on certain machines only (XP)? Can it be done using MSI?

[glennda]

Windows 7 or XP?

If xp then just deploy adminpak.msi. To the machines that will need it - then remove access to the administrative tools snap ins


T

EDIT: just read it was xp - so just deploy the msi

[Hightower]

How does one go about removing access to the admin tools snap-in? GPO?

[glennda]

You should be able to restrict it through gpo to only allow specific MMC things to open. I.e just specify dsa.msc. I will have a poke around to find where the setting is.

Toby

[Hightower]

That's wicked - I'm some way off sorting out MSI's and images etc, but this will come in handy for when I get to that stage. It's good to be prepared

[glennda]

I think its this

user config/polices/admin templates/windows componets/Microsoft Management Console - then restrict all bar the Active Directory Users and Comps snap in

Toby