Change Password Permissions

[Jamie_a]

I`ve created a snapin to allow teachers to change password but the allow user to change password tick box is greyed out, what permissions do I need to give users.

[apeo]

You need to Delegate Control in AD Users and Computers i believe.

[rush_tech]

You need to Delegate Control in AD Users and Computers i believe.

 

Yes Delegation is required to specfic users in AD for it too work

[Jamie_a]

I`ve delegated and enabled change passwords, So staff can change passwords, they just cant tick the user must change password box.

[apeo]

So you put a tick in 'Reset user passwords and force password change at next logon'?

[Disease]

If you look in the delegate permissions there should be an option there to allow them to force change at next logon.

[sahmeepee]

You can't force password change at next logon if "password never expires" is ticked in their account properties - the two are mutually exclusive. (I suspect Windows uses the password expiry feature to trigger the requirement to change at logon.)