I would be careful about that:
Account Operators  "...Members of this group can log on locally to domain 
controllers in the domain and shut them down... "
http://technet2.microsoft.com/WindowsServer/en/library/1631acad-ef34-4f77-9c2e-94a62f8846cf1033.mspx?mfr=true

Andrew Fidel



Michael Miller <[EMAIL PROTECTED]> 
Sent by: [EMAIL PROTECTED]
12/22/2006 10:38 AM
Please respond to
[email protected]


To
[email protected]
cc

Subject
Re: [ActiveDir] Delegate Password Resets






I put the user accounts of the helpdesk personnel in the built in group, 
Account Operators. This is precisely why I think that group exists.

-mjm


Salandra, Justin A. wrote:
>
> I wanted to find out from all of you what ways you have delegated 
> password reset functions to your helpdesks.  We have a product that 
> does this but it is continually having problems and want to know if 
> there are nay other ways.
>
> 
>
> Justin A. Salandra
>
> MCSE Windows 2000 and 2003
>
> Network and Technology Services Manager
>
> Catholic Health Care System
>
> 646.505.3681
>
> cell 917.455.0110
>
> [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
>
> 
>
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/[email protected]/

Reply via email to