Want to change passwords in batch but not use an administrator

  • Thread starter Thread starter Terry
  • Start date Start date
T

Terry

This is a batch passed by a web program that allows users
to change their own password and is read and run on the
DC. Trying to use a limited capability account to change
passwords via batch file so to limit it from being able
to change administrator level passwords and possibly
someone to hijack my admin's access.
But it receives the dreaded "Non-administrators receive
a "System error 5 has occurred. Access is denied" error
message when they attempt to change the password."
Is there a limited permission that will allow my limited
account to do this without giving full control.
 
Yes it is Reset Password. However you have to use LDAP aware methods of changing the password or else it will fail with
the access denied. I.E. NET USER USERID PASSWORD will fail whereas a vbscript with the LDAP provider attaching to the id
will be able to do it.
 
Thanks guys, was hoping for the net user approach as is
obviously easier, but will try the ldifde approach as
already use it to set some attributes that addusers
doesn't do. Thanks for the link.
 
Back
Top