I`ve created a snapin to allow teachers to change password but the allow user to change password tick box is greyed out, what permissions do I need to give users.
Printable View
I`ve created a snapin to allow teachers to change password but the allow user to change password tick box is greyed out, what permissions do I need to give users.
You need to Delegate Control in AD Users and Computers i believe.
Yes Delegation is required to specfic users in AD for it too work :)Quote:
Originally Posted by apeo
I`ve delegated and enabled change passwords, So staff can change passwords, they just cant tick the user must change password box.
So you put a tick in 'Reset user passwords and force password change at next logon'?
If you look in the delegate permissions there should be an option there to allow them to force change at next logon.
You can't force password change at next logon if "password never expires" is ticked in their account properties - the two are mutually exclusive. (I suspect Windows uses the password expiry feature to trigger the requirement to change at logon.)