Staff changing passwords on a vanilla network

[d-taylor]

Hi,

 

Is there a way I can get staff to reset student passwords on a vanilla network? I tried creating a custom console of active directory users and computers but a standard user cannot access this (makes sense really!) Is there some way I can set them up to change student passwords without giving them the administrator password and letting them loose on the server (something which I really don't want to do!)

 

Thanks,

 

Daniel

[Guest TheLibrarian]

You need to use the Delegate Control wizard in AD Users and Conputers to delegate password change to a group of users.

[Cmd.exe]

It's been a while since we did this, but i think we needed to install the server 2003 admin pack, to enable to custom snap-in to work on the client machine.

[glennda]

If you set up the delegated control like above you can create a simple batch file that prompts for you to enter the username and then for a password to reset to. Im just trying to dig it out now its alot easier then third party apps that you can buy. Will post it when i can find the script

 

Toby

[d-taylor]

Thanks! I have managed to run the delegate wizard and given the users rights. If you find that batch file/ script it would be much appreciated, otherwise i'll look at the admin pack

 

Daniel

[Guest TheLibrarian]

@echo off
setlocal
:start
cls
echo,
echo,
set /p _username_=Please enter the username :
if "%_username_%" == "q" goto end
for /f "tokens=1* delims=*" %%i in ('dsquery user -limit 1 -samid "%_username_%"') do (
set _upn_=%%i
if NOT "%%i" == "" goto chpwd
)
goto start

:chpwd
dsmod user %_upn_% -pwdneverexpires no
dsmod user %_upn_% -pwd 123456 -mustchpwd yes
:end

[d-taylor]

Cool that's great

 

Many thanks

 

Daniel

[SpuffMonkey]

Or you could give them this, once you've delegated control http://www.wisesoft.co.uk/software/passwordcontrol/default.aspx