Have to agree on this with Kevin. If you have divided your users in OUs. It is easy to create a customized MMC with the scope only set to the applicable users OUs. Delegate rights to the teachers with the capability to only reset and change passwords on user objects. You will have to install the applicable administrative tool on to the teachers computer, so this would be Active Directory users and computers. Via a gPO you can restrict the use of other administrative tools, you can find this policy under User configuration\Windows Components\Microsoft Management Console\restricted permitted snap-ins, you can also set policies regarding the use of MMCs, you can find these settings in the same policy as described above. Regards, Dennis Schut
________________________________ Van: [EMAIL PROTECTED] namens Sullivan, Kevin Verzonden: ma 08-sep-03 13:24 Aan: [EMAIL PROTECTED] Onderwerp: RE: [ActiveDir] Resetting Password In addition to the script you can create a taskpad combined with simple delegation and your teacher will only see what you need them to see and have rights to what they need to have rights to. If W2k3 you can use 'Saved Queried' as the launch off point for your taskpad view and only show students. I assume that there is some attribute that designates a student vs. a teacher vs. a staff member. This is a great feature of the MMC that I don't see utilized all that often. If you want total flexibility for delegation tasks and custom interfaces you probably want to look at what some third party products have to offer. Kevin Sullivan Aelita Software ________________________________ From: Dennis Schut [mailto:[EMAIL PROTECTED] On Behalf Of Dennis Schut Sent: Monday, September 08, 2003 7:03 AM To: [EMAIL PROTECTED] Check this link, http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcenter/user/ScrUG03.asp Dennis ________________________________ Van: [EMAIL PROTECTED] namens Marshall Moens Verzonden: ma 08-sep-03 08:57 Aan: [EMAIL PROTECTED] Onderwerp: [ActiveDir] Resetting Password Guys, I work for a high school, and want to be able to give the computer teacher, rights to reset student passwords. Does anyone have a script I can borrow, that will allow the teacher to reset student passwords? I am really uncomfortable allowing the teacher to rifle through OU's. TIA Marshall List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
<<winmail.dat>>
