Account Operators

praveen

Distinguished
Jun 26, 2004
11
0
18,510
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Dear All,

I want to assign some of the user to the Account Operators group who can
then Administer user accounts.

Though these user are assigned to the "Account Operators" group they are
unable to :

1. Reset the passwords
2. Move user from one organisation to another
3. Unlock domain accounts
4. Add users to the Account user group.

When these user who are members of Account Operators group try to do the
above functions, the error we get is:

"General access denied error"

I think the Account Operators group has to be configured to do what it has
to do, I dont know how, or I may be totally wrong, please advice how to use
the AO group.

Thanks in advance.

--
praveen.kumar@aut.ac.nz
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Not enough
Create OU, right click, ... Delegation and here you can delegate anything to
anyone.


"praveen" <praveen@discussions.microsoft.com> wrote in message
news:B52D74E5-5DBF-4F65-B1E4-8480DED66A01@microsoft.com...
> Dear All,
>
> I want to assign some of the user to the Account Operators group who can
> then Administer user accounts.
>
> Though these user are assigned to the "Account Operators" group they are
> unable to :
>
> 1. Reset the passwords
> 2. Move user from one organisation to another
> 3. Unlock domain accounts
> 4. Add users to the Account user group.
>
> When these user who are members of Account Operators group try to do the
> above functions, the error we get is:
>
> "General access denied error"
>
> I think the Account Operators group has to be configured to do what it has
> to do, I dont know how, or I may be totally wrong, please advice how to
> use
> the AO group.
>
> Thanks in advance.
>
> --
> praveen.kumar@aut.ac.nz