Giving rights to a group to reset and unlock users in a AD domain

Giganews Newsgroups
Subject: Giving rights to a group to reset and unlock users in a AD domain
Posted by:  sqldbaguy (sqldbaguy.3uyr…@DoNotSpam.com)
Date: Tue, 7 Jul 2009

Hi guys,

Im new here. I have a problem that I hope you guys can help with. Our
A.D. guy has quit so they are giving me (the SQL DBA guy) the
responsibilities.

I am trying to add this group of users, who we are calling the "Account
Password Reset group" and I need to give them the right to reset any
user password, and also unlock a user in the domain. The only problem
is, when I add that group under Account Operators it doesn't work. My
users get an Access Denied error or something like that. And they can
only reset and unlock users within their own "Account Password Reset
group".  It works when I put them under Domain Admin group, but those
privileges are too broad, and our director does not want them with all
those rights. Is there another built in group I could use, or a way to
modify their rights so they can have privileges to unlock and reset user
accounts?

Please help me, I have to have this fixed very soon and I dont need to
lose my job with the way the market is right now. Please help me.

Thanks

--
sqldbaguy
------------------------------------------------------------------------
sqldbaguy's Profile:http://forums.techarena.in/members/112384.htm
View this thread:http://forums.techarena.in/active-directory/1209623.htm

http://forums.techarena.in

Replies