Changing student passwords for non IT staff

[win]

Does anyone use a tool that allows regular staff (non-admins) to reset student passwords only?

[beancole]

what client OS are you on and what server/Domain level function?

[strawberry]

Wisesoft password control is your friend on this on.

[Oaktech]

Impero... Allows staff to change passwords of students (and other staff if you so choose to set it up like that)

[halbaradkenafin]

We've got Impero set up to allow staff to do it. If you don't have that it's possible to do with a custom MMC and delegation of rights in AD.

[win]

Windows 7 with DC functional level set at 2008r2.

 

Haven't got impero here so will have to check out wisesoft. It looks like an old application but at 2008r2 i'm hoping it will still work, anyone using it at this functional level?

[Gibson335]

Might be worth having a look at this: Reset Student User Password Free Tool for Schools, Business and Education - Burconix

[FN-GM]

Wisesoft password control is your friend on this on.

 

We use this as well. Works great.

[win]

Without impero, Wisesoft and BCX look like great options - will give both a try.

 

Thanks all

[harriuk]

We use a hta that sits on the staff desktop you search for users by username or surname and it allows staff to change the password of students. I think I got it from the spiceworks website. I'll dig it out when I get back in on Monday.

[Techdw]

Guys,

 

How did you set WiseSoft to just look at one OU ( Students )

 

I am testing it now and it looks at the whole of AD with Account operator rights

[dalehopper]

we have this added to a shortcut, then it only looks for one OU

 

\\servername\passcontrol$\PasswordControl.exe -root "ou=Students,OU=People,dc=network,dc=local" -s "ServerName"

[themightymrp]

We install a subset of rsat on staff laptops and provide a custom MMC console on the desktop to AD Users and Computers. With delegated rights, all they can do is reset passwords for the kids.

[Techdw]

Doesn't work for me,

Test Staff account still has access to change staff passwords

[themightymrp]

Have you delegated control in AD first so that staff accounts don't have permission to reset staff passwords?

[Techdw]

Yeah just done that, but I don't like the fact they can still see STAFF accounts even though they cannot change the password

[Techdw]

All sorted now. Downloaded the Beta copy and it works directed onto the student OU

[ITGURU]

Why would you want to allow staff to do that unless you don't have dedicated on-site IT Staff.

I'd never let staff do it, and know of one school who wrote a script file and made all the staff domain admins to let them change student passwords!

[themightymrp]

If you use the MMC console method, once you add the AD Users and Computers, expand the folders out until you find the OU for Students. Right click this and choose to open a new window from here. You should now have a view with only the student OU and accounts visible, nothing to do with staff. Now change the MMC options from Author mode to User mode - limited access, single window. Save the resulting MMC and deploy to laptops/PC's (obviously they will require RSAT installed on the machines first)

 

You can also set access permissions for the MMC so that only a staff account can open it. By leveraging the delegate permissions feature of AD this is an easy way to let staff reset passwords.

 

And @ITGURU, allowing staff to reset student passwords prevents the inevitable queue outside the IT Tech's door of students who 'forgot their password' while they were ill for 24 hours. Tedious and time consuming for a trained technician to have to do.

[strawberry]

I'd never let staff do it, and know of one school who wrote a script file and made all the staff domain admins to let them change student passwords!

 

It also puts the onus on behaviour back onto the teacher. If the student forgets their password then the teacher has to deal with it, so the bevaiour actually gets addressed (Rather than the teacher sit marking whilst the class search's for the tech with everyone thinking they are bunking off teaching /being taught.)