Account Operators should have enough permission to change any password for any user account with equal or lesser permissions.
In other words, Account Operators can change the password for any Domain User, but cannot change the password for a Domain Admin or Enterprise Admin. Make sure you are not trying to change a password for a current, or past, Domain Admin. Once you are a Domain Admin, your account's security/ACL is modified. Also, you will have an "adminCount=1" attribute on your account. This shows that you are, or were, a Domain Admin. Pick an account that won't let you change the password. Then, in Active Directory Users and Computers, look at the Security tab > Advanced button of that account. If they are/were a Domain Admin, the account should not inherit permissions (checkbox is clear). m!ke -----Original Message----- From: Isidro Pimentel [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 09, 2008 5:40 PM To: CF-Talk Subject: Re: Resetting Active Directory Password using CFLDAP ? Thank you, so much for the solution it was a tremendous help. I have an additional question. If you could please help that would be great. I created the CF account in AD and added it to the Account Operators group however, I am not able to change passwords but if I use the Administrator account it works. Is there anything else outside of the operators group that I need to do. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;192386516;25150098;k Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:303087 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
