faza Posted November 17, 2015 Posted November 17, 2015 Hi Could you pleaae tell me the best solution for allowing ICT Teachers to gain access to change Pupils password in Active Directory. Thanks Faza
Ephelyon Posted November 17, 2015 Posted November 17, 2015 A custom MMC along with delegated permissions at the OU level in Active Directory.
HPlum78 Posted November 18, 2015 Posted November 18, 2015 Setup a password reset mail box, have the teacher mail that account with the student/ students names that they need the password changing in the CC box and then have a powershell script check the mailbox and reset the accounts in the CC box with new passwords and mail the teacher back with the new passwords. No need to hand out custom MMC and throw in a load of fine grained permissions, keep stuff simple and secure.
Diello Posted November 18, 2015 Posted November 18, 2015 Delegate permissions and distribute Reset Student User Password Free Tool for Schools, Business and Education - Burconix
FN-GM Posted November 18, 2015 Posted November 18, 2015 We delegate permissions and use this software - Password Control
HPlum78 Posted November 18, 2015 Posted November 18, 2015 The day of the click next admin is coming to an end along with the GUI on windows server listen to jeff and retool now, Powershell is your friend here why invest time and effort into third party tools for password and user management when its all in the box?
Gardinho Posted November 18, 2015 Posted November 18, 2015 @HPlum78 I'd be very interested in seeing this powershell script in action. Pretty please could you share the code and brief instructions?
HPlum78 Posted November 18, 2015 Posted November 18, 2015 I will dig it out and send it over to you. 1
LeMarchand Posted November 18, 2015 Posted November 18, 2015 We delegate permissions and use this software - Password Control Same here.
duzzie Posted November 18, 2015 Posted November 18, 2015 @HPlum78 I'd be very interested in seeing the powershell script as well please.
Norphy Posted November 18, 2015 Posted November 18, 2015 The day of the click next admin is coming to an end along with the GUI on windows server listen to jeff and retool now, Powershell is your friend here why invest time and effort into third party tools for password and user management when its all in the box? You may or may not be correct but this is about delegating rights to a set of users outside of the network admin team. The average user isn't going to be comfortable running PowerShell scripts to reset passwords so at best, you'd have to find or code an a GUI interface for the PowerShell script. Effectively saying "Pfft, use PowerShell n00b" isn't being particularly helpful.
HPlum78 Posted November 18, 2015 Posted November 18, 2015 (edited) You miss understand I am not saying put the script in the hands of the end user, the idea is to have your management server do the leg work and to the end user its as hard as using their mail client (don't even have to be outlook) we as Admins do the hard work and leave our users using tools that they have used since the year .DOT! no need for showing them MMC or some other third party tool, no need to go around installing that tool into your desktop image and if you do not want all staff to be able to change passwords then you set the security on the mail box and this can be as fine grained as you like. Edited November 18, 2015 by HPlum78
themightymrp Posted November 18, 2015 Posted November 18, 2015 Does the powershell script need the students username or their actual name? Just thinking we have a few kids with the same name.... Oh, and I wouldn't mind a nosey at the script too please
nadeem Posted November 18, 2015 Posted November 18, 2015 We delegate permissions and use this software - Password Control We do this - - - Updated - - - We delegate permissions and use this software - Password Control We do this
HPlum78 Posted November 18, 2015 Posted November 18, 2015 I will get this posted/ get back to those who are interested asap, I have a day of meetings today..... but if I can grab 10 mins I will get it to you.
originofsymmetry Posted November 18, 2015 Posted November 18, 2015 I will get this posted/ get back to those who are interested asap, I have a day of meetings today..... but if I can grab 10 mins I will get it to you. I'd also be interested!
HPlum78 Posted November 18, 2015 Posted November 18, 2015 So for those who need an insight (and to clear up for those who do not know who Jeff is. Referred to in my previous post) take a look at the following https://mva.microsoft.com/en-us/training-courses/getting-started-with-powershell-desired-state-configuration-dsc-8672?l=ZwHuclG1_2504984382 Forget its about DSC as that's not the important part! (first 30 mins will cover it) and if you are the click, click, click admin that they speak about think about changing that soon, take a look at the mass of stuff from C9 and MS VIT Academy that Jeff has put up. I am now involved in a lot of projects around automation, DSC and the like. If you are sure that the GUI will be around on your windows server in the future (Nano server!) search for Jeff Snover windows server 2016 nano as he is making it very clear that its the start of the end for the server GUI. Oh a tip for you guys 2x speed will get you through so much content! H 3
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now