Admin Users - But not full control ?

[cpjitservices]

Hi,

 

Some of our managers want to have control of things like Changing Passwords, however I don't want to give them access to things like changing passwords on Admin accounts only the restricted user accounts.

 

Is there anyway I can setup an Admin account so they can change passwords only on accounts higher Admins can specify ? I also don't want to give them access to group policy.

 

Can this be achieved in Group Policy ?

 

 

Cheers

[FN-GM]

you do this by using the delegate control feature in active directory. lots on here about it.

 

Our teachers can change student passwords but not staff.

[cpjitservices]

found it!!

 

Thanks for that!!!!

[FN-GM]

found it!!

 

Thanks for that!!!!

 

We also created a custom MMC so the staff could see the other OU's