Managing User's Passwords

Archived from groups: microsoft.public.win2000.security (More info?)

Hi Jim,

you could delegate control over password resets by right clicking on OU and
selecting Delegate Control. In Wizard, select account that you want to be
able to reset the password and select the permission you want to give it
(e.g. reset the password)...

Next thing you need to do is to create custom MMC console with only OU that
manager will manage in it...

HOW TO: Create Custom MMC Snap-in Tools Using Microsoft Management Console
http://support.microsoft.com/defau [...] ct=win2000

I hope this helps you out...

Mike

"Jim" <jlange@netgainis.com> wrote in message
news:2011401c4586e$7f1891e0$a001280a@phx.gbl...
> WE have a windows 2000 AD and would like each department
> head to have the ability to change the password for their
> personnel. Do not want to have each department head to
> login at the server. How can I set it up that the
> department head can change passwords at their pc?