security group...account operators

  • Thread starter Thread starter Hutch
  • Start date Start date
H

Hutch

We want to give our desktop support access to unlock user
passwords and change user passwords. However, we do not
want to give them rights to modify groups. The account
operators group give them both.

Is there a way to only allow them to do user accounts
administration?

Thanks,
Hutch
 
Yes.

Delegate the following to user objects for a group and add the support guys to the group

reset password
write prop for lockoutTime
write prop for pwdLastSet (if you want them to be able to set user must change password on next logon)
 
Back
Top