Give a user rights to change other user's password

[Andrea Casini]

I need to build a user that is enabled to change other users password for use
of a custom applicazion we are writing. Obviously, i would like these user
the have very little privileges besides the required one.

We have a Windows Server 2003 Active Directory enviroment.

Any suggestions?
thx

 

[Steve Riley [MSFT]]

The AD delegation of control wizard will help you here.

http://www.microsoft.com/technet/pr...ogies/activedirectory/stepbystep/ctrlwiz.mspx


--
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com



"Andrea Casini" <AndreaCasini@discussions.microsoft.com> wrote in message
news6207C76-7746-41C6-8162-676E96C71667@microsoft.com...
> I need to build a user that is enabled to change other users password for
> use
> of a custom applicazion we are writing. Obviously, i would like these user
> the have very little privileges besides the required one.
>
> We have a Windows Server 2003 Active Directory enviroment.
>
> Any suggestions?
> thx

 

[Steve Riley [MSFT]]

Just happened to think... are you wanting a way to change the Windows
passwords, or passwords that you create specifically for this custom
application? If Windows passwords, then follow my suggestion. If instead
you're creating your own user account database for this application, then
you'll have to build your password change mechanism.

--
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com



"Steve Riley [MSFT]" <steve.riley@microsoft.com> wrote in message
news:58F182E3-5F6D-4128-90D1-BC13790E78D9@microsoft.com...
> The AD delegation of control wizard will help you here.
>
> http://www.microsoft.com/technet/pr...ogies/activedirectory/stepbystep/ctrlwiz.mspx
>
>
> --
> Steve Riley
> steve.riley@microsoft.com
> http://blogs.technet.com/steriley
> http://www.protectyourwindowsnetwork.com
>
>
>
> "Andrea Casini" <AndreaCasini@discussions.microsoft.com> wrote in message
> news6207C76-7746-41C6-8162-676E96C71667@microsoft.com...
>> I need to build a user that is enabled to change other users password for
>> use
>> of a custom applicazion we are writing. Obviously, i would like these
>> user
>> the have very little privileges besides the required one.
>>
>> We have a Windows Server 2003 Active Directory enviroment.
>>
>> Any suggestions?
>> thx
>

 

[Andrea Casini]

No, we want to use Windows Accounts so that we can optimize User Account
management. Thank you for your help.

"Steve Riley [MSFT]" wrote:

> Just happened to think... are you wanting a way to change the Windows
> passwords, or passwords that you create specifically for this custom
> application? If Windows passwords, then follow my suggestion. If instead
> you're creating your own user account database for this application, then
> you'll have to build your password change mechanism.
>
> --
> Steve Riley
> steve.riley@microsoft.com
> http://blogs.technet.com/steriley
> http://www.protectyourwindowsnetwork.com
>
>
>
> "Steve Riley [MSFT]" <steve.riley@microsoft.com> wrote in message
> news:58F182E3-5F6D-4128-90D1-BC13790E78D9@microsoft.com...
> > The AD delegation of control wizard will help you here.
> >
> > http://www.microsoft.com/technet/pr...ogies/activedirectory/stepbystep/ctrlwiz.mspx
> >
> >
> > --
> > Steve Riley
> > steve.riley@microsoft.com
> > http://blogs.technet.com/steriley
> > http://www.protectyourwindowsnetwork.com
> >
> >
> >
> > "Andrea Casini" <AndreaCasini@discussions.microsoft.com> wrote in message
> > news6207C76-7746-41C6-8162-676E96C71667@microsoft.com...
> >> I need to build a user that is enabled to change other users password for
> >> use
> >> of a custom applicazion we are writing. Obviously, i would like these
> >> user
> >> the have very little privileges besides the required one.
> >>
> >> We have a Windows Server 2003 Active Directory enviroment.
> >>
> >> Any suggestions?
> >> thx
> >