User account that can change passwords

[caffrey]

I'd like to set up a user that has limited rights - e.g. I'd like them to be able to change passwords for users (from a remote desktop) and I would also like them to authorise installs on local machines, is this possible ? I don't really want to set them up as a domain administrator if at all possible.

[6Foot2]

Re: Password changes: Have a look at this thread:

 

Link: http://www.edugeek.net/forums/windows-server-2008-r2/103341-allowing-teachers-ability-change-student-passwords-vanilla-network.html

 

It has a couple of ideas as to how you could achieve this. We use Password Control but you could just as easily use Burconix.

Edited February 22, 2013 by 6Foot2
Correct spelling mistake.

[benjie]

Hi,

 

To reset password, you need to give the user permission to change password, this can be done via delegating control of an OU. Please follow these instructions:

Delegate Control of an Organizational Unit

 

To change the password I would recommend creating an MMC panel. You will need to install remote server administrator tools on the PC that they will be using. An alternative is to install password control by wisesoft. This software is dead easy to use, you simple type in the username and the a new password. It also enables you to force password change.

Password Control

 

You could either give them permission to create Group policy or give them local admin rights on the PC.

 

Hope this helps

 

Ben

[caffrey]

Thank you, some more light reading for me